CVE-2017-3523: Improper Access Control in MySQL Connectors Java
Summary
CVE-2017-3523: Improper Access Control in MySQL Connectors Java. Affects mysql:mysql-connector-java versions < 5.1.41. Fixed in 5.1.41. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
MySQL Connectors is a component of Oracle MySQL that provides Java-based connectivity to MySQL databases. It allows developers to interact with MySQL databases using Java programming language. The vulnerability, identified as CVE-2017-3523, affects versions 5.1.40 and earlier of MySQL Connectors. This vulnerability is categorized as an improper access control issue, which means that it allows a low privileged attacker with network access to compromise MySQL Connectors. Although the vulnerability is specific to MySQL Connectors, it can have significant impacts on other products as well.
Vulnerability Detail
The vulnerability in MySQL Connectors arises from a flaw in the Connector/J subcomponent. It is difficult to exploit, but if successfully exploited, it can lead to a complete takeover of MySQL Connectors. The impact of this vulnerability includes confidentiality, integrity, and availability breaches. An attacker with network access can exploit this vulnerability through multiple protocols. The Common Vulnerability Scoring System (CVSS) 3.0 Base Score for this vulnerability is 8.5, indicating a high severity level.
How To Fix
Latest published version: 8.0.33 as of 23 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
5.1.41
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability. The best course of action is to follow the recommended fix and upgrade MySQL Connectors to a secure version.
Conclusion
The vulnerability in MySQL Connectors Java (CVE-2017-3523) poses a significant risk to the security and integrity of MySQL Connectors. It is crucial to upgrade to a secure version (5.1.41 or later) to mitigate this vulnerability. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for mysql:mysql-connector-java →
FAQ
MySQL Connectors is a component of Oracle MySQL that provides Java-based connectivity to MySQL databases.
Versions 5.1.40 and earlier of MySQL Connectors are affected by this vulnerability.
Successful exploitation of this vulnerability can result in a complete takeover of MySQL Connectors, compromising confidentiality, integrity, and availability.
An attacker with network access can exploit this vulnerability through multiple protocols.
The CVSS 3.0 Base Score for this vulnerability is 8.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for mysql:mysql-connector-java.
