IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
4.3Orta

CVE-2026-44169MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions

MariaDB server Yayım: (5 ay önce)

Açıklama

MariaDB server is a community developed fork of MySQL server. From versions 11.4.1 to before 11.4.11, 11.8.1 to before 11.8.7, and 12.3.1, a user getting EXECUTE access to a stored routine via a role, could see the routine definition even without SHOW CREATE ROUTINE privilege. This issue has been patched in versions 11.4.11, 11.8.7, and 12.3.2.

Zayıflık türü (CWE): CWE-863

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
mariadb mariadb 11.4.1 – < 11.4.11
MariaDB server >= 11.4.1, < 11.4.11, >= 11.8.1, < 11.8.7, >= 12.3.1, < 12.3.2

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (3)
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 11.4.1 < 11.4.11
  • cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:* ≥ 11.8.1 < 11.8.7
  • cpe:2.3:a:mariadb:mariadb:12.3.1:*:*:*:*:*:*:*

Aynı üründe son açıklar — MariaDB