Cloudanix VulnDB

CVE-2024-21244

Low · 2.2

CVSS

2.2

EPSS

0.7%

Published

Oct 15, 2024

CISA due date

—

Cloudanix analysis

Monitor only SSVC: Track

Database software has a flaw that could let certain trusted users see a small amount of extra information they should not access, though taking advantage of it is quite difficult.

Exploitation
Remote Authenticated
Attacker needs
High Privilege
Complexity
High
Impact
Data Exposure
Component
Application
Class
Information Disclosure
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

The vulnerability in the Telemetry component permits a high-privileged network attacker to read a limited subset of MySQL Server accessible data under difficult exploitation conditions.

Why it matters to the business

Limited risk of partial data exposure in database deployments; low EPSS and difficult exploit conditions reduce immediate operational urgency but still require patching to protect sensitive information.

How an attack unfolds

A high-privileged attacker with network access connects to the MySQL Server using supported protocols and leverages the Telemetry flaw to retrieve a subset of data.

How to fix it

Upgrade MySQL Server to versions after 8.4.2 and 9.0.1. For the blackduck-hub package update to version 4.0.1 or later.

How to confirm the fix worked

Confirm MySQL version exceeds the affected releases, review Telemetry component configuration, and validate that privileged network access no longer permits unauthorized data reads.

Typical attack path

  1. Acquire high-privileged network credentials for the MySQL Server
  2. Establish a connection via multiple protocols to the target server
  3. Interact with the Telemetry component to trigger the flaw
  4. Read the unauthorized subset of accessible data

How to detect it

Review MySQL server logs and network connection records for unusual privileged access patterns targeting the Telemetry component.

What your security team should do

  • Apply the appropriate MySQL and blackduck-hub updates immediately
  • Audit high-privileged accounts with network access to the database
  • Restrict unnecessary access to the Telemetry component

The record

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected packages

Ecosystem Package Introduced Fixed
Ubuntu:14.04:LTS mysql-5.5 0 No fix
Ubuntu:20.04:LTS mariadb-10.3 0 No fix
Ubuntu:Pro:14.04:LTS mysql-5.5 0 No fix
Ubuntu:Pro:16.04:LTS mysql-5.7 0 No fix

Related vulnerabilities