IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
4.3Mittel

CVE-2026-44169MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB server Veröffentlicht: (vor 5 Monaten)

Beschreibung

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

Schwachstellentyp (CWE): CWE-863

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
mariadb mariadb 11.4.1 – < 11.4.11
MariaDB server >= 11.4.1, < 11.4.11, >= 11.8.1, < 11.8.7, >= 12.3.1, < 12.3.2

Referenzen und Patches

CPE-Treffer (NVD) (3)
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 11.4.1 < 11.4.11
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 11.8.1 < 11.8.7
  • cpe:2.3:a:mariadb:mariadb:12.3.1:*:*:*:*:*:*:*

Neue CVEs im selben Produkt — MariaDB