Input validation error in Oracle Solaris - CVE-2014-6551

 

Input validation error in Oracle Solaris - CVE-2014-6551

Published: October 16, 2014 / Updated: August 10, 2020


Vulnerability identifier: #VU41209
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2014-6551
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.


Affected software

Oracle Solaris

How to mitigate CVE-2014-6551

Install update from vendor's website.


External References

Related Security Bulletins