CVE-2020-2572

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin). Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

• https://security.gentoo.org/glsa/202105-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200122-0002/Third Party Advisory
• https://usn.ubuntu.com/4250-1/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory
• https://security.gentoo.org/glsa/202105-27Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200122-0002/Third Party Advisory
• https://usn.ubuntu.com/4250-1/Third Party Advisory
• https://www.oracle.com/security-alerts/cpujan2020.htmlPatch, Vendor Advisory

Published

Jan 15, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25714Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-25715A flaw was found in pki-core 10.9.0. A specially crafted POS…6.1
• CVE-2020-25716A flaw was found in Cloudforms. A role-based privileges esca…8.1
• CVE-2020-25717A flaw was found in the way Samba maps domain users to local…8.1
• CVE-2020-25718A flaw was found in the way samba, as an Active Directory Do…8.8
• CVE-2020-25719A flaw was found in the way Samba, as an Active Directory Do…7.2
• CVE-2020-25720A vulnerability was found in Samba where a delegated adminis…7.5
• CVE-2020-25721Kerberos acceptors need easy access to stable AD identifiers…8.8
• CVE-2020-25722Multiple flaws were found in the way samba AD DC implemented…8.8
• CVE-2020-25723A reachable assertion issue was found in the USB EHCI emulat…3.2
• CVE-2020-25724A flaw was found in RESTEasy, where an incorrect response to…4.3
• CVE-2020-25725In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state)…5.5