Uploaded image for project: 'MariaDB Server'
  1. MariaDB Server
  2. MDEV-40470

GRANT PROXY with empty password incorrectly checks grantor's privileges

    XMLWordPrintable

Details

    • Can result in unexpected behaviour

    Description

      CREATE USER u1@localhost;
       
      CREATE USER u2@localhost IDENTIFIED BY 'oldpassword';
      GRANT ALL PRIVILEGES ON *.* TO u2@localhost WITH GRANT OPTION;
       
      show create user u2@localhost;
       
      connect u,localhost,u1;
      SHOW GRANTS;
      GRANT PROXY ON u1@localhost TO u2@localhost IDENTIFIED VIA
        '' OR mysql_native_password USING PASSWORD('newpassword');
       
      connection default;
      show create user u2@localhost;
       
      drop user u1@localhost;
      drop user u2@localhost;
      

      Reported by Kévin GERVOT

      Attachments

        Activity

          People

            serg Sergei Golubchik
            serg Sergei Golubchik
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - 0d
                0d
                Remaining:
                Remaining Estimate - 0d
                0d
                Logged:
                Time Spent - 1h
                1h

                Git Integration

                  Error rendering 'com.xiplink.jira.git.jira_git_plugin:git-issue-webpanel'. Please contact your Jira administrators.