BIT-mysql-shell-2022-21555

    Dashboard / Vulnerabilities / BIT-mysql-shell-2022-21555

    BIT-mysql-shell-2022-21555

    Published: 6 Mar 2024Last Modified: 8 Sept 2026

    Summary:

    Details: Vulnerability in the MySQL Shell for VS Code product of Oracle MySQL (component: Shell: GUI). Supported versions that are affected are 1.1.8 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Shell for VS Code executes to compromise MySQL Shell for VS Code. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Shell for VS Code, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Shell for VS Code accessible data as well as unauthorized read access to a subset of MySQL Shell for VS Code accessible data. CVSS 3.1 Base Score 4.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).

    References: https://www.oracle.com/security-alerts/cpujul2022.html, https://nvd.nist.gov/vuln/detail/CVE-2022-21555

    Affected packages

    Package

    Name: mysql-shell

    Purl: pkg:bitnami/mysql-shell

    Affected ranges

    Type: SEMVER

    Events:

    Introduced- 0
    Fixed -1.1.9

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    BIT-mysql-shell-2022-21555 | CVE-DB