CVE Catalog
CVE-2000-0045
MediumExploitation Probability (EPSS)
Very high risk6.99%
93th percentile - higher than 93% of all known CVEs
Summary
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
Risk Assessment
The ability for unauthorized users to change passwords can lead to account takeover of MySQL users, posing a serious threat to data security.
Recommendation
It is recommended to restrict GRANT privileges to trusted users and to regularly monitor and audit user accounts.
Original NVD description (English source)
MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.