Vulnerability Details CVE-2017-10789
The DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is optional (even though this setting's documentation has a "your communication with the server will be encrypted" statement), which allows man-in-the-middle attackers to spoof servers via a cleartext-downgrade attack, a related issue to CVE-2015-3152.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.8%
CVSS Severity
CVSS v3 Score 5.9
CVSS v2 Score 4.3
Products affected by CVE-2017-10789
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0000_0
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_2
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0001_3
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_2
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_3
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_4
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0002_5
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0003_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0004_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0005_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0007_2
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0008_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:3.0009_1
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.00
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.001
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.002
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.003
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.004
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.005
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.006
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.007
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.008
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.009
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.010
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.011
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.012
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.013
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.014
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.015
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.016
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.017
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.018
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.019
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.020
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.021
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.022
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.023
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.024
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.025
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.026
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.027
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.028
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.029
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.030_02
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.031
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_02
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.032_03
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_02
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.033_03
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.034
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_02
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.035_03
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.036
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.037_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.038_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.039
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.040
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.041
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.041_01
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.041_2
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.042
-
cpe:2.3:a:dbd-mysql_project:dbd-mysql:4.043