Severity
High
Analysis Summary
CVE-2022-45347
Apache ShardingSphere-Proxy could allow a remote attacker to bypass security restrictions, caused by the failure to cleanup the database session completely after client authentication failed by the database backend when using MySQL. By constructing a special MySQL client, an attacker could exploit this vulnerability to execute normal commands.
Impact
- Security Bypass
Indicators Of Compromise
CVE
- CVE-2022-45347
Affected Vendors
Apache
Affected Products
- Apache ShardingSphere-Proxy 5.0.0
Remediation
Upgrade to the latest version of ShardingSphere, available from the Apache Website.