Improper Access Control in MySQL Connectors Java

MEDIUM 4.9CVE-2015-2575 · GHSA-gc43-g62c-99g2 · Published 16/04/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
mysql:mysql-connector-java Maven	`< 5.1.35`	`5.1.35`
mysql mysql	`≤ 5.1.34`	No fix yet

Description

Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2015-2575 · ADVISORY
security.netapp.com/advisory/ntap-20150417-0003 · WEB
lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html · WEB
lists.opensuse.org/opensuse-updates/2015-05/msg00089.html · WEB
debian.org/security/2016/dsa-3621 · WEB
oracle.com/technetwork/topics/security/cpuapr2015-2365600.html · WEB
securityfocus.com/bid/74075 · Third Party Advisory
securitytracker.com/id/1032121 · Third Party Advisory
security.netapp.com/advisory/ntap-20150417-0003

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free