CVE-2021-2471 @ Maven-mysql:mysql-connector-java-5.1.18

[alex-ko-dev]

Vulnerable Package issue exists @ Maven-mysql:mysql-connector-java-5.1.18 in branch master

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). This vulnerability affects versions through 8.0.26. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors.

Namespace: alexey-ast-test-1-org
Repository: alexey-ast-test-1-repo
Repository Url: https://github.com/alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST-Project: alexey-ast-test-1-org/alexey-ast-test-1-repo
CxAST platform scan: 360384fc-7c82-48a3-81a0-1a1e2f6064e8
Branch: master
Application: alexey-ast-test-1-repo
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-611

---

Additional Info
Attack vector: NETWORK
Attack complexity: HIGH
Confidentiality impact: HIGH
Availability impact: HIGH
Remediation Upgrade Recommendation: 8.0.16.redhat-00001

---

References
Disclosure
Commit
Release Note
Advisory
Advisory