Test ID:	1.3.6.1.4.1.25623.1.0.810885
Category:	Databases
Title:	Oracle Mysql Security Updates (apr2017-3236618) 03 - Linux
Summary:	Oracle MySQL is prone to a security bypass vulnerability.
Description:	Summary: Oracle MySQL is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists due to an incorrect implementation or enforcement of 'ssl-mode=REQUIRED' in MySQL. Vulnerability Impact: Successful exploitation of this vulnerability will allow remote attackers to bypass certain security restrictions and perform unauthorized actions by conducting a man-in-the-middle attack. This may lead to other attacks also. Affected Software/OS: Oracle MySQL version 5.5.54 and earlier, 5.6.35 and earlier on Linux Solution: Apply the patch from the referenced advisory. CVSS Score: 6.3 CVSS Vector: AV:N/AC:M/Au:S/C:C/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-3305 BugTraq ID: 97023 http://www.securityfocus.com/bid/97023 Debian Security Information: DSA-3834 (Google Search) http://www.debian.org/security/2017/dsa-3834 http://riddle.link/ http://www.openwall.com/lists/oss-security/2017/03/17/3 RedHat Security Advisories: RHSA-2017:2787 https://access.redhat.com/errata/RHSA-2017:2787 http://www.securitytracker.com/id/1038287
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.