CData API Server MySQL Misconfiguration Information Disclosure Vulnerability

A misconfiguration vulnerability allowing information disclosure has been identified in CData API Server. This issue arises from the application's handling of MySQL connections. When connecting to a MySQL server, the server is permitted to request local files from the client. An authenticated attacker can exploit this flaw to access sensitive information, with the disclosure occurring in the context of the NETWORK SERVICE.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information on the affected system.

Remediation

The recommended mitigation strategy is to limit interactions with the product.