MySQL 8.0 Permission Check Bypass in mk-oracle (CVE-2023-22619) Advisory

Vulnerability Overview Vulnerability ID: Work #22619 Vulnerability Name: Fix permission check in mk-oracle when executing the OIC Vulnerability Type: Permission Check Issue Severity: Medium CVSS Score: 5.3 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Discovery Date: 2023-04-12 Fix Date: 2023-04-12 CVE Number: CVE-2023-22619 CWE Number: CWE-269 Affected Components: MySQL Community, Oracle, Percona, MariaDB, Oracle Cloud, Cloud SQL, Cloud SQL for MySQL Impact Scope Affected Versions: - MySQL 8.0.32 - MySQL 8.0.33 - MySQL 8.0.34 - MySQL 8.0.35 - MySQL 8.0.36 - MySQL 8.0.37 - MySQL 8.0.38 - MySQL 8.0.39 - MySQL 8.0.40 - MySQL 8.0.41 - MySQL 8.0.42 - MySQL 8.0.43 - MySQL 8.0.44 - MySQL 8.0.45 - MySQL 8.0.46 - MySQL 8.0.47 - MySQL 8.0.48 - MySQL 8.0.49 - MySQL 8.0.50 - MySQL 8.0.51 - MySQL 8.0.52 - MySQL 8.0.53 - MySQL 8.0.54 - MySQL 8.0.55 - MySQL 8.0.56 - MySQL 8.0.57 - MySQL 8.0.58 - MySQL 8.0.59 - MySQL 8.0.60 - MySQL 8.0.61 - MySQL 8.0.62 - MySQL 8.0.63 - MySQL 8.0.64 - MySQL 8.0.65 - MySQL 8.0.66 - MySQL 8.0.67 - MySQL 8.0.68 - MySQL 8.0.69 - MySQL 8.0.70 - MySQL 8.0.71 - MySQL 8.0.72 - MySQL 8.0.73 - MySQL 8.0.74 - MySQL 8.0.75 - MySQL 8.0.76 - MySQL 8.0.77 - MySQL 8.0.78 - MySQL 8.0.79 - MySQL 8.0.80 - MySQL 8.0.81 - MySQL 8.0.82 - MySQL 8.0.83 - MySQL 8.0.84 - MySQL 8.0.85 - MySQL 8.0.86 - MySQL 8.0.87 - MySQL 8.0.88 - MySQL 8.0.89 - MySQL 8.0.90 - MySQL 8.0.91 - MySQL 8.0.92 - MySQL 8.0.93 - MySQL 8.0.94 - MySQL 8.0.95 - MySQL 8.0.96 - MySQL 8.0.97 - MySQL 8.0.98 - MySQL 8.0.99 - MySQL 8.0.100 Remediation Fixed Versions: - MySQL 8.0.32 - MySQL 8.0.33 - MySQL 8.0.34 - MySQL 8.0.35 - MySQL 8.0.36 - MySQL 8.0.37 - MySQL 8.0.38 - MySQL 8.0.39 - MySQL 8.0.40 - MySQL 8.0.41 - MySQL 8.0.42 - MySQL 8.0.43 - MySQL 8.0.44 - MySQL 8.0.45 - MySQL 8.0.46 - MySQL 8.0.47 - MySQL 8.0.48 - MySQL 8.0.49 - MySQL 8.0.50 - MySQL 8.0.51 - MySQL 8.0.52 - MySQL 8.0.53 - MySQL 8.0.54 - MySQL 8.0.55 - MySQL 8.0.56 - MySQL 8.0.57 - MySQL 8.0.58 - MySQL 8.0.59 - MySQL 8.0.60 - MySQL 8.0.61 - MySQL 8.0.62 - MySQL 8.0.63 - MySQL 8.0.64 - MySQL 8.0.65 - MySQL 8.0.66 - MySQL 8.0.67 - MySQL 8.0.68 - MySQL 8.0.69 - MySQL 8.0.70 - MySQL 8.0.71 - MySQL 8.0.72 - MySQL 8.0.73 - MySQL 8.0.74 - MySQL 8.0.75 - MySQL 8.0.76 - MySQL 8.0.77 - MySQL 8.0.78 - MySQL 8.0.79 - MySQL 8.0.80 - MySQL 8.0.81 - MySQL 8.0.82 - MySQL 8.0.83 - MySQL 8.0.84 - MySQL 8.0.85 - MySQL 8.0.86 - MySQL 8.0.87 - MySQL 8.0.88 - MySQL 8.0.89 - MySQL 8.0.90 - MySQL 8.0.91 - MySQL 8.0.92 - MySQL 8.0.93 - MySQL 8.0.94 - MySQL 8.0.95 - MySQL 8.0.96 - MySQL 8.0.97 - MySQL 8.0.98 - MySQL 8.0.99 - MySQL 8.0.100 Exploit Code None

Goal Reached Thanks to every supporter — we hit 100%!

MySQL 8.0 Permission Check Bypass in mk-oracle (CVE-2023-22619) Advisory