HIGH🇬🇧 English

CVE-2020-10996

CVSS 8.1v3.1pub. 2020-04-27upd. 2024-11-21

An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transition_key for SST processes in place of the random key expected.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Percona Xtradb Cluster

    APP
    Percona
    < 5.7.28-31.41.2
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2020-15180CRITICAL9.0ten sam produkt

A flaw was found in the mysql-wsrep component of mariadb. Lack of input sanitization in `wsrep_sst_method` all...

CVE-2017-15365HIGH8.8ten sam produkt

sql/event_data_objects.cc in MariaDB before 10.1.30 and 10.2.x before 10.2.10 and Percona XtraDB Cluster befor...

CVE-2016-6663HIGH7.0ten sam produkt

Race condition in Oracle MySQL before 5.5.52, 5.6.x before 5.6.33, 5.7.x before 5.7.15, and 8.x before 8.0.1; ...

CVE-2016-6664HIGH7.0ten sam produkt

mysqld_safe in Oracle MySQL through 5.5.51, 5.6.x through 5.6.32, and 5.7.x through 5.7.14; MariaDB; Percona S...

CVE-2026-25212CRITICAL9.9PL ✓ten sam vendor

RCE w Percona PMM — eskalacja uprawnień przez wewnętrznego użytkownika bazy danych