Oracle MySQL Server Privileges Vulnerability Allowing Unauthorized Data Access

A vulnerability exists in Oracle MySQL Server in versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This vulnerability allows a low-privileged attacker with network access to compromise the MySQL Server. Exploitation of this vulnerability could lead to unauthorized read access, as well as unauthorized update, insert, or delete access to some data accessible by the MySQL Server.

Impact

Successful exploitation allows unauthorized access and modification of MySQL Server data.

Remediation

Users can apply the January 2025 Critical Patch Update, which includes a patch for this vulnerability. Instructions for applying the patch can be found in the MySQL Critical Patch Update January 2025 Patch Availability Document on My Oracle Support.