CVE-2019-5443 in MySQL Server

Summary

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

01/04/2019

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
143678	Oracle MySQL Server cURL code injection	94	Not defined	Official fix	CVE-2019-5443
143588	Oracle Enterprise Manager Ops Center cURL code injection	94	Not defined	Official fix	CVE-2019-5443
137212	cURL OpenSSL local code injection	94	Not defined	Not defined	CVE-2019-5443

Sources

• MITRE
• NVD
• CVE Details