Vulnerability Details : CVE-2019-12301
The Percona Server 5.6.44-85.0-1 packages for Debian and Ubuntu suffered an issue where the server would reset the root password to a blank value upon an upgrade. This was fixed in 5.6.44-85.0-2.
Products affected by CVE-2019-12301
- cpe:2.3:a:percona:percona_server:5.6.44-85.0-1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-12301
0.21%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 57 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-12301
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST | |
9.8
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
References for CVE-2019-12301
-
https://jira.percona.com/browse/PS-5640
[PS-5640] MySQL root password reset on update to 5.6.44 - Percona JIRAIssue Tracking;Vendor Advisory
-
https://www.percona.com/blog/2019/05/17/percona-server-for-mysql-5-6-44-85-0-is-now-available/
Percona Server for MySQL 5.6.44-85.0 - Percona Database Performance BlogVendor Advisory
Jump to