CVE-2012-5627: Oracle MySQL and MariaDB 5.5.x before 5.5.29, 5.3.x before 5.3.12, and 5.2.x before 5.2.14 does not modify...

Security readout for executives and security teams

This flaw affects older Oracle MySQL and MariaDB releases where repeated user-change operations in one connection reused the same salt. That made password guessing faster for someone who could already authenticate to the database. The main business risk is account compromise in legacy database environments, especially where database access is broadly reachable. Exposure is most likely in legacy MySQL or MariaDB deployments still running the named pre-fixed branches. Risk increases when authenticated database access is available from application networks, shared admin hosts, VPNs, or broad internal segments. Treat this as a legacy database hygiene issue with moderate urgency. It is not documented here as actively exploited, but it can materially weaken password security where old database versions remain accessible. Mitigation focus: Upgrade affected deployments to 5.5.29, 5.3.12, 5.2.14, or later as applicable.; Check current vendor guidance for supported fixed releases and migration paths.; Restrict database access to required hosts, users, and network paths..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.