Test Kennung:	1.3.6.1.4.1.25623.1.0.145119
Kategorie:	Databases
Titel:	MariaDB Named Pipe Permission Vulnerability (MDEV-24040) - Windows
Zusammenfassung:	MariaDB is prone to a named pipe permission vulnerability.
Beschreibung:	Summary: MariaDB is prone to a named pipe permission vulnerability. Vulnerability Insight: With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between the client and the server, and getting the ability to run SQL commands on behalf of the connected user. This occurs because of an incorrect security descriptor. Affected Software/OS: MariaDB versions 10.1, 10.2, 10.3, 10.4 and 10.5. Solution: Update to version 10.1.48, 10.2.35, 10.3.26, 10.4.16, 10.5.7 or later. CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2020-28912 https://hackerone.com/reports/1019891 https://jira.mariadb.org/browse/MDEV-24040
Copyright	Copyright (C) 2021 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.