Threats tagged 'bit-mariadb-2026-97380'

MariaDB server versions from 10.6.1 up to but not including 10.6.28, 10.11.1 up to 10.11.19, 11.4.1 up to 11.4.13, 11.8.1 up to 11.8.9, 12.3.1 up to 12.3.3, and 13.0.1 up to 13.0.2 contain a vulnerability in the GRANT PROXY statement. This flaw allows a low-privileged attacker who can name another account to change that account's password due to improper handling of an IDENTIFIED clause with an empty password. The issue is fixed in later versions.