CVE Vulnerabilities

CVE-2018-2598

Published: Jul 18, 2018 | Modified: Nov 21, 2024
CVSS 3.x
3.7
LOW
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Workbench. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Workbench accessible data. CVSS 3.0 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected Software

Name Vendor Start Version End Version
Mysql_workbench Oracle * 6.3.10 (including)
Mysql-workbench Ubuntu artful *
Mysql-workbench Ubuntu bionic *
Mysql-workbench Ubuntu cosmic *
Mysql-workbench Ubuntu esm-apps/bionic *
Mysql-workbench Ubuntu esm-apps/xenial *
Mysql-workbench Ubuntu trusty *
Mysql-workbench Ubuntu upstream *
Mysql-workbench Ubuntu xenial *

References