Description
In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands.
This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OB | OceanBase Server | 3.2.4.x – < 3.2.4.8, 4.2.1 x – < 4.2.1.10, 4.2.x – < 4.2.5, 4.3.3.x – < 4.3.3.2 | 3.2.4.8 |