CVE-2017-15365
mariadb: Replication in sql/event_data_objects.cc occurs before ACL checks
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · October 6, 2017
Updated · June 28, 2026
Description
It was discovered that MariaDB could replicate certain data definition language (DDL) commands to other cluster nodes despite an access control check failure. A user with an SQL access to the server could possibly use this flaw to perform database modification on certain cluster nodes without having privileges to perform such changes.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 8.8CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-284 · Improper Access Control