CVE-2012-5615

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error…

published December 3, 2012

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14784 · 96.7th percentile
Published
2012-12-03T11:00Z
EPSS history
Timeline
  • 03 DEC 11:00Z
    Oracle MySQL 5.5.38 and earlier, 5.6.19 and earlier, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error…
    cvelistv5