{"id":"CVE-2020-2933","state":"PUBLISHED","title":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerabilit","description":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L).","publishedAt":"2020-04-15T13:29:53.000Z","updatedAt":"2024-09-27T18:48:58.711Z","severity":{"score":2.2,"label":"Low","version":"3.0","vector":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","source":"oracle"},"assigner":"oracle","products":["Oracle Corporation MySQL Connectors"],"affected":[{"vendor":"Oracle Corporation","product":"MySQL Connectors","versions":[{"version":"5.1.48 and prior","status":"affected"}]}],"references":["https://www.oracle.com/security-alerts/cpuapr2020.html","https://lists.debian.org/debian-lts-announce/2020/06/msg00015.html","https://www.debian.org/security/2020/dsa-4703","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDKQVPFT4Z4SFPBH6YNFMJOXKS2YYKHA/","https://security.gentoo.org/glsa/202105-27"],"weaknesses":[],"ingestedAt":"2026-10-29T19:47:19.060Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/2xxx/CVE-2020-2933.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-2933","state":"PUBLISHED","datePublished":"2020-04-15T13:29:53.000Z","dateUpdated":"2024-09-27T18:48:58.711Z","assignerShortName":"oracle","assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","dateReserved":"2019-12-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L)."}],"affected":[{"vendor":"Oracle Corporation","product":"MySQL Connectors","versions":[{"version":"5.1.48 and prior","status":"affected"}]}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00015.html","name":"[debian-lts-announce] 20200611 [SECURITY] [DLA 2245-1] mysql-connector-java security update","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.debian.org/security/2020/dsa-4703","name":"DSA-4703","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D/","name":"FEDORA-2020-747ec39700","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDKQVPFT4Z4SFPBH6YNFMJOXKS2YYKHA/","name":"FEDORA-2020-35995bb2d3","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://security.gentoo.org/glsa/202105-27","name":"GLSA-202105-27","tags":["vendor-advisory","x_refsource_GENTOO"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":2.2,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors.","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"oracle","dateUpdated":"2021-05-26T11:08:20.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2020-2933","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"MySQL Connectors","version":{"version_data":[{"version_affected":"=","version_value":"5.1.48 and prior"}]}}]},"vendor_name":"Oracle Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L)."}]},"impact":{"cvss":{"baseScore":"2.2","vectorString":"CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L","version":"3.0"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors."}]}]},"references":{"reference_data":[{"name":"https://www.oracle.com/security-alerts/cpuapr2020.html","refsource":"MISC","url":"https://www.oracle.com/security-alerts/cpuapr2020.html"},{"name":"[debian-lts-announce] 20200611 [SECURITY] [DLA 2245-1] mysql-connector-java security update","refsource":"MLIST","url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00015.html"},{"name":"DSA-4703","refsource":"DEBIAN","url":"https://www.debian.org/security/2020/dsa-4703"},{"name":"FEDORA-2020-747ec39700","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D/"},{"name":"FEDORA-2020-35995bb2d3","refsource":"FEDORA","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MDKQVPFT4Z4SFPBH6YNFMJOXKS2YYKHA/"},{"name":"GLSA-202105-27","refsource":"GENTOO","url":"https://security.gentoo.org/glsa/202105-27"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/06/msg00015.html","name":"[debian-lts-announce] 20200611 [SECURITY] [DLA 2245-1] mysql-connector-java security update","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://www.debian.org/security/2020/dsa-4703","name":"DSA-4703","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D/","name":"FEDORA-2020-747ec39700","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDKQVPFT4Z4SFPBH6YNFMJOXKS2YYKHA/","name":"FEDORA-2020-35995bb2d3","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"https://security.gentoo.org/glsa/202105-27","name":"GLSA-202105-27","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T07:24:00.692Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-27T18:00:47.319725Z","id":"CVE-2020-2933","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-27T18:48:58.711Z"}}]}}}