Oracle MySQL Client Unauthorized Data Access Vulnerability in mysqldump Component

A vulnerability has been identified in the MySQL Client product of Oracle MySQL, specifically in the mysqldump component. This issue affects versions 8.0.0 through 8.0.42, 8.4.0 through 8.4.5, and 9.0.0 through 9.3.0. The vulnerability is difficult to exploit but allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Client. Exploitation of this vulnerability requires human interaction from a third party. Successful attacks could lead to unauthorized update, insert, or delete access to certain MySQL Client accessible data, as well as unauthorized read access to a subset of MySQL Client accessible data.

Impact

Exploitation of this vulnerability could result in unauthorized access to modify or delete data within the MySQL Client, as well as unauthorized read access to some data.