Cloudanix VulnDB

CVE-2024-21243

Low · 2.2

CVSS

2.2

EPSS

0.7%

Published

Oct 15, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

A database server flaw could let someone with special high-level access see a small amount of its internal information, but the issue is difficult to reach.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
High
Impact
Data Exposure
Component
Network Service
Class
Information Disclosure
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The flaw in the Telemetry component permits a high-privileged network attacker to bypass access controls and read a limited subset of server-accessible data.

Why it matters to the business

Limited risk of internal data exposure that could support reconnaissance; high privileges and difficult exploitation reduce immediate operational disruption.

How an attack unfolds

An attacker who already possesses high database privileges connects over supported network protocols to the Telemetry component and triggers the access-control weakness to retrieve otherwise restricted data.

How to fix it

Upgrade affected MySQL Server installations (8.4.2 and earlier, 9.0.1 and earlier) to the latest vendor-supplied versions that contain the fix for the Telemetry component.

How to confirm the fix worked

Confirm the running MySQL version exceeds the affected releases, review Telemetry component access controls, and perform authenticated network scans to verify the flaw is no longer present.

Typical attack path

  1. Obtain high-privileged network credentials for the MySQL Server
  2. Establish a connection via one of the supported protocols to the Telemetry component
  3. Trigger the vulnerability to read a subset of server data

How to detect it

Inspect database audit and connection logs for high-privileged sessions interacting with the Telemetry component; correlate with unusual data-read patterns.

What your security team should do

  • Apply the latest MySQL patches as soon as they are available
  • Enforce least-privilege access for all database administrators
  • Monitor privileged connections to the Telemetry component for anomalies

The record

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected packages

Ecosystem Package Introduced Fixed
Ubuntu:14.04:LTS mysql-5.5 0 No fix
Ubuntu:20.04:LTS mariadb-10.3 0 No fix
Ubuntu:Pro:14.04:LTS mysql-5.5 0 No fix
Ubuntu:Pro:16.04:LTS mysql-5.7 0 No fix

Related vulnerabilities