CVE-2023-22102

A vulnerability was found in the MySQL Connectors product of Oracle MySQL (component: Connector/J). This issue may allow unauthenticated attackers with network access via multiple protocols to compromise MySQL Connectors. Successful attacks can result in a takeover of MySQL Connectors.

This flaw has been rated as having a security impact of Moderate because it is difficult to exploit and requires user interaction.

The package mariadb Java client is available in Red Hat Software Collections. It can be installed this way:

   yum-config-manager --enable rhel-server-rhscl-7-rpms
   yum install rh-mariadb105-mariadb-java-client

This JDBC driver works fine with both MariaDB and MySQL servers. We recommend use of mariadb-java-client over mysql-java-connector where possible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.