CVE-2022-26944

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-26944
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-26944.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-26944
Aliases
Published
2022-06-02T18:15:09.607Z
Modified
2026-04-12T05:04:50.798568Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Percona XtraBackup 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table. NOTE: this issue exists because of an incomplete fix for CVE-2020-10997.

References

Affected packages

Git / github.com/percona/percona-xtrabackup

Affected ranges

Type
GIT
Repo
https://github.com/percona/percona-xtrabackup
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8b4056a68cd78d18e577cdc8a15d44ce0f0d1ca
Database specific 
{
    "cpe": "cpe:2.3:a:percona:xtrabackup:2.4.20:*:*:*:*:*:*:*",
    "source": "CPE_FIELD",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.20"
        }
    ]
}

Affected versions

clone-5.*
clone-5.1.0-build
clone-5.1.31-pv-0.2.0-build
clone-5.1.4-build
clone-5.4.0-build
clone-5.6.11-build
clone-5.6.3-m5-build
clone-5.6.3-m6-build
clone-5.6.6-m9-build
clone-5.6.7-rc-build
clone-5.6.9-rc-build
mysql-3.*
mysql-3.23.22-beta
mysql-3.23.28-gamma
mysql-3.23.30-gamma
mysql-3.23.31
mysql-3.23.32
mysql-3.23.33
mysql-3.23.36
mysql-4.*
mysql-4.0.2
mysql-4.0.4
mysql-5.*
mysql-5.1.4
mysql-5.6.11
mysql_4.*
mysql_4.0
mysqlsummit-0.*
mysqlsummit-0.2.0
mysqlsummit-0.2.0-build
mysqlsummit-0.2.1
mysqlsummit-0.2.1-build
percona-xtrabackup-2.*
percona-xtrabackup-2.4.17
percona-xtrabackup-2.4.18
percona-xtrabackup-2.4.20

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-26944.json"