Executive Summary

This vulnerability exists in the MySQL Router product of Oracle MySQL, specifically affecting versions 9.0.0 through 9.7.0. It is an easily exploitable flaw that allows an unauthenticated attacker with network access via HTTP to compromise the MySQL Router.

A successful attack can lead to a complete takeover of the MySQL Router, impacting confidentiality, integrity, and availability of the system.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can allow an attacker to take over the MySQL Router without any authentication, which means the attacker can potentially control or disrupt database routing operations.

• Loss of confidentiality: sensitive data handled by the router could be exposed.
• Loss of integrity: data or routing configurations could be altered maliciously.
• Loss of availability: the router service could be disrupted, causing denial of service.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an unauthenticated attacker with network access to fully compromise the MySQL Router, resulting in complete loss of confidentiality, integrity, and availability.

Such a compromise could lead to unauthorized access to sensitive data or disruption of services, which may violate requirements of common standards and regulations such as GDPR and HIPAA that mandate protection of personal and health information.

Therefore, organizations using affected versions of MySQL Router may face increased risk of non-compliance if this vulnerability is exploited.

Useful 0 Not Useful 0