Exploit for #VU32786 Improper Authentication in MySQL Server

Vulnerability identifier: #VU32786

Vulnerability risk: Medium

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:A/U:Green]

CVE-ID: CVE-2012-2122

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 2

• July 29, 2020
  • MySQL - Authentication Bypass [Exploit-DB]
  • MySQL Authentication Bypass Password Dump [Metasploit]

Vulnerable software:
MySQL Server
Server applications / Database software

Vendor: Oracle