Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported     versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged     attacker with access to the physical communication segment attached to the hardware where the MySQL     Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person     other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster.
    (CVE-2022-21482)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the mysql package has been released.

The version of mysql installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-21482 advisory.

  - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported     versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged     attacker with access to the physical communication segment attached to the hardware where the MySQL     Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person     other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster.
    (CVE-2022-21482)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
262432	Linux Distros Unpatched Vulnerability : CVE-2022-21482	Nessus	Misc.	medium
204076	Photon OS 3.0: Mysql PHSA-2022-3.0-0415	Nessus	PhotonOS Local Security Checks	medium
203217	Photon OS 4.0: Mysql PHSA-2022-4.0-0187	Nessus	PhotonOS Local Security Checks	medium
173506	CBL Mariner 2.0 Security Update: mysql (CVE-2022-21482)	Nessus	MarinerOS Local Security Checks	medium

Detections

Analytics

CVE-2022-21482

medium

Tenable Plugins

medium

medium

medium

medium