CVE-2024-21247

Summary

CVE-2024-21247 is a vulnerability affecting Oracle MySQL Client, specifically the mysqldump component, with supported versions 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior being impacted. This easily exploitable vulnerability allows high-privileged attackers with network access to compromise the MySQL Client, potentially leading to unauthorized updates, insertions, deletions, and read access to accessible data. The CVSS 3.1 base score for this vulnerability is 3.8, indicating low severity but notable confidentiality and integrity impacts. Organizations are advised to remediate this issue by updating to the latest version of MySQL Client as recommended by Oracle's security alerts. If exploited, this vulnerability poses a risk of data integrity breaches within affected systems due to its ability to manipulate sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.