| Package | Affected versions | Patched versions |
|---|---|---|
| mysql connector/net | = 6.0.0= 6.0.1= 6.0.2≤ 6.0.3 |
MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free