CVE-2015-2575: Improper Access Control in MySQL Connectors Java
Summary
CVE-2015-2575: Improper Access Control in MySQL Connectors Java. Affects mysql:mysql-connector-java versions < 5.1.35. Fixed in 5.1.35. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The MySQL Connectors component is a crucial part of Oracle MySQL, providing Java-based connectivity to MySQL databases. It allows developers to establish connections, execute queries, and manage data between Java applications and MySQL servers. The vulnerability identified as CVE-2015-2575 affects versions of MySQL Connectors Java up to 5.1.34. This vulnerability can be exploited by remote authenticated users to compromise the confidentiality and integrity of the system. The specific vectors related to Connector/J are not disclosed.
Vulnerability Detail
The vulnerability in MySQL Connectors Java arises from an unspecified flaw that enables remote authenticated users to impact the confidentiality and integrity of the system. The exact nature of the vulnerability is not disclosed, making it difficult to assess the potential ramifications. However, it is important to note that this vulnerability affects versions up to 5.1.34 of MySQL Connectors Java.
How To Fix
Latest published version: 8.0.33 as of 23 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
5.1.35
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround is provided for this vulnerability. It is crucial to apply the recommended fix by upgrading to a patched version of MySQL Connectors Java.
Conclusion
The vulnerability in MySQL Connectors Java (CVE-2015-2575) poses a moderate risk to the confidentiality and integrity of systems. To mitigate this vulnerability, it is crucial to upgrade to version 5.1.35 or later of MySQL Connectors Java. Developers should promptly update their dependencies and recompile their applications to ensure the patched version is utilized. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mysql:mysql-connector-java →
FAQ
The impact of this vulnerability is not explicitly stated. However, it is classified as moderate severity, indicating potential risks to confidentiality and integrity.
Users of MySQL Connectors Java versions up to 5.1.34 are affected by this vulnerability.
No specific exploits are mentioned in the vulnerability details. However, it is crucial to apply the recommended fix to prevent any potential exploitation.
Yes, a patch is available in version 5.1.35 of MySQL Connectors Java. It is recommended to upgrade to this version or a later one to address the vulnerability.
For more information, you can refer to the GitHub advisory database entry for this vulnerability: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-gc43-g62c-99g2/GHSA-gc43-g62c-99g2.json
Related vulnerabilities
Recent vulnerabilities recorded for mysql:mysql-connector-java.
