CVE-2022-26944

MEDIO 6.5CVE-2022-26944 · Published 02/06/2022 · updated 17/06/2026

In breve

CVE-2022-26944 è una vulnerabilità MEDIO (CVSS 6.5) che riguarda xtrabackup (percona).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.97%, superiore al 62.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
xtrabackup percona	`= 2.4.20`	No fix yet

Description

Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table. NOTE: this issue exists because of an incomplete fix for CVE-2020-10997.

References

docs.percona.com/percona-xtrabackup/2.4/release-notes/2.4/2.4.25.html · Release Notes
jira.percona.com/browse/PXB-2722 · Permissions Required

Altre vulnerabilità di xtrabackup

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xtrabackup

percona

= 2.4.20

No fix yet

Description

Altre vulnerabilità di xtrabackup

Vedi tutto →