Skip to main content

Incorrect Default Permissions

CVE-2025-30706

High
7.5/10

Summary

A vulnerability exists in the MySQL Connectors product of Oracle MySQL (component: Connector/J). This is a difficult-to-exploit vulnerability that allows a low-privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful exploitation of this vulnerability can result in a complete takeover of MySQL Connectors. This issue affects versions 9.0.0 through 9.2.0.

  • HIGH
  • NETWORK
  • HIGH
  • UNCHANGED
  • NONE
  • LOW
  • HIGH
  • HIGH

CWE-276 - Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References

Advisory Timeline

  • Published