01 Record

CVE-2012-2122

sql/password.c in Oracle MySQL 5.1.x before 5.1.63, 5.5.x before 5.5.24, and 5.6.x before 5.6.6, and MariaDB 5.1.x before 5.1.62, 5.2.x before 5.2.12, 5.3.x before 5.3.6, and 5.5.x before 5.5.23, when

UnratedPUBLISHEDCNA: redhat

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 96.50% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 99.8% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Modified. NVD last modified this record on 2026-06-16.
Red Hat severity: Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2012-06-26 18:00Z14 YR AGO

Last updated

2024-08-06 19:26Z2 YR AGO

Reserved

2012-04-04

Assigning CNA

redhat

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-287Improper AuthenticationClass
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')Base

Data version

5.1

Document digest

329dc5264c0a7f84d10d3b066294b87a7101db30e3fbede7c232750f3ca11c32

05 Affected products

VendorProductVersionsPlatforms

mariadbmariadbNot specified—

oraclemysqlNot specified—

redhatenterprise_linuxNot specified—

06 References

bugs.mysql.comhttp://bugs.mysql.com/bug.php?id=64884x_refsource_MISC
www.securityfocus.com53911http://www.securityfocus.com/bid/53911vdb-entryx_refsource_BID
www.exploit-db.com19092http://www.exploit-db.com/exploits/19092exploitx_refsource_EXPLOIT-DB
secunia.com53372http://secunia.com/advisories/53372third-party-advisoryx_refsource_SECUNIA
security.gentoo.orgGLSA-201308-06http://security.gentoo.org/glsa/glsa-201308-06.xmlvendor-advisoryx_refsource_GENTOO
lists.opensuse.orgSUSE-SU-2012:0984http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00007.htmlvendor-advisoryx_refsource_SUSE
community.rapid7.comhttps://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysqlx_refsource_MISC
securitytracker.com1027143http://securitytracker.com/id?1027143vdb-entryx_refsource_SECTRACK
secunia.com49417http://secunia.com/advisories/49417third-party-advisoryx_refsource_SECUNIA
seclists.org[oss-security] 20120609 Security vulnerability in MySQL/MariaDB sql/password.chttp://seclists.org/oss-sec/2012/q2/493mailing-listx_refsource_MLIST
kb.askmonty.orghttp://kb.askmonty.org/en/mariadb-5162-release-notes/x_refsource_CONFIRM