Approved changes feed: RSS · Atom
cpe:2.3:a:pingcap:tidb:5.3.0:*:*:*:*:*:*:*
part: a version: 5.3.0 update: *
| Vendor | Pingcap (8ffbdce8-3de1-5f5c-adfc-345b994debdb) |
|---|---|
| Product | Tidb (2f82e08a-339d-5e91-b50b-71af2722cda3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-31011 |
vulnerable | 2026-06-08 05:43:39.972900 |
TiDB authentication bypass vulnerability
HIGH (7.8)
TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access. Only users using TiDB 5.3.0 are affected by this vulnerability. TiDB version 5.3.1 contains a patch for this issue. Other mitigation strategies include turning off Security Enhanced Mode (SEM), disabling local login for non-root accounts, and ensuring that the same IP cannot be logged in as root and normal user at the same time.
Published: 2022-05-31T19:30:18.000Z
Updated: 2025-04-23T18:20:55.933Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.