CVE Feed

    Dashboard / CVE / CVE-2018-2598

    CVE-2018-2598

    Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Workbench accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

    Published:Jul 18, 2018
    Last Modified:Nov 21, 2024
    EPS:Jul 18, 2018
    EPSS Score:0.0054
    CVSS Score:3.7

    Affected Products

    Vendor
    Oracle
    Product
    Mysql Workbench

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-1292 (CVSS 7.3) — The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script …
    CVE-2022-23308 (CVSS 7.5) — valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.…
    CVE-2021-44533 (CVSS 5.3) — Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names …
    CVE-2022-21824 (CVSS 8.2) — Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input t…
    CVE-2021-44531 (CVSS 7.4) — Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a partic…
    CVE-2021-44532 (CVSS 5.3) — Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string fo…
    CVE-2021-3634 (CVSS 6.5) — A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets…
    CVE-2021-3712 (CVSS 7.4) — ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer ho…
    CVE-2021-3537 (CVSS 5.9) — A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsin…
    CVE-2021-3517 (CVSS 8.6) — There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High