CVE-2020-10996
High
Description
An issue was discovered in Percona XtraDB Cluster before 5.7.28-31.41.2. A bundled script inadvertently sets a static transition_key for SST processes in place of the random key expected.
SeverityHigh
CVSS8.1
Exploit probability—
Product
Percona Xtradb Cluster
PublishedApr 27, 2020
First seenApr 27, 2020
How to fix
Update
- percona xtradb_cluster5.7.28-31.41.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| percona xtradb_cluster | v < 5.7.28-31.41.2 | 5.7.28-31.41.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.