IBM Guardium & Oracle MySQL Multiple Vulnerabilities Advisory (CVE-2023-3440, CVE-2023-21296, etc.)

Critical Vulnerability Information Vulnerability Overview IBM Guardium Data Protection is affected by multiple vulnerabilities, which have been resolved in a single update. Vulnerability Details CVE-2023-3440: IBM Security Guardian contains a cross-site scripting vulnerability that could lead to sensitive data exposure. CVE-2023-21296: Oracle MySQL Server has a denial-of-service vulnerability related to the InnoDB component. CVE-2023-21209: MySQL Client product, specifically the mysqladmin utility, is vulnerable to attacks by high-privileged attackers who can exploit multiple protocols over the network to compromise MySQL Client and steal Session Cookies from human interaction requests, leading to unauthorized data read access. CVE-2023-21272: MySQL Connector/Python component is vulnerable to remote authentication attacks that allow attackers to execute arbitrary code, resulting in high confidentiality, integrity, and availability impacts. CVE-2023-21281: MySQL Server has a denial-of-service vulnerability related to the Server: PS component. CVE-2023-21284: MySQL Server product, specifically the Server: Optimizer component, has a denial-of-service vulnerability. CVE-2023-21285: MySQL Server has a denial-of-service vulnerability related to the Server: Telemetry component. CVE-2023-21286: MySQL Connectors have a denial-of-service vulnerability related to the Connector/ODBC component. CVE-2023-21287: MySQL Server has a denial-of-service vulnerability related to the Server: Group Replication GCS component. CVE-2023-21288: MySQL Server product, specifically the Server: PS component, has a denial-of-service vulnerability. CVE-2023-21289: MySQL Server has a denial-of-service vulnerability related to the Server: Information Schema component. CVE-2023-21290: MySQL Server product, specifically the Client programs component, has a denial-of-service vulnerability. CVE-2023-21291: MySQL Server has a denial-of-service vulnerability related to the Server: Health Monitor component. CVE-2023-21292: MySQL Server has a denial-of-service vulnerability related to the InnoDB component. CVE-2023-21293: MySQL Server has a denial-of-service vulnerability related to the Server: Telemetry component. CVE-2023-21294: MySQL Server has a denial-of-service vulnerability related to the Server: Optimizer component. CVE-2023-21295: MySQL Server has a denial-of-service vulnerability related to the Server: PS component. CVE-2023-21297: MySQL Server has a denial-of-service vulnerability related to the Server: Information Schema component. CVE-2023-21298: MySQL Server has a denial-of-service vulnerability related to the Server: Telemetry component. Affected Products and Versions IBM Guardium Data Protection 11.5 Mitigation Measures IBM recommends that customers update their systems as soon as possible.

Goal Reached Thanks to every supporter — we hit 100%!

IBM Guardium & Oracle MySQL Multiple Vulnerabilities Advisory (CVE-2023-3440, CVE-2023-21296, etc.)