The version of MySQL running on the remote host is 8.0.x prior to 8.0.17. It is, therefore, affected by multiple vulnerabilities, including three of the top vulnerabilities below, as noted in the July 2019 and October 2022 Critical Patch Update advisories:

  - An unspecified vulnerability in the     'Shell: Admin / InnoDB Cluster' subcomponent could allow     an unauthenticated attacker to takeover an affected MySQL     Server. A successful attack requires user interaction.
    (CVE-2019-2822)

  - As unspecified vulnerability in the 'Server: Replication'     subcomponent could allow an unauthenticated attacker to     cause the server to hang or to, via a frequently     repeatable crash, cause a complete denial of service.
    Additionally, a successful attacker could perform     unauthorized modifications to some MySQL Server     accessible data. (CVE-2019-2800)

  - As unspecified vulnerability in the 'Server: Charsets'     subcomponent could allow an unauthenticated attacker to     cause the server to hang or to, via a frequently     repeatable crash, cause a complete denial of service.
    (CVE-2019-2795)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MySQL 8.0.x < 8.0.17 Multiple Vulnerabilities (July 2019 CPU)

high Nessus Plugin ID 126784

Version 1.8