{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "Connector/J unspecified vulnerability (CPU April 2023)",
    "tracking": {
      "current_release_date": "2026-07-22T19:58:01+00:00",
      "generator": {
        "date": "2026-07-22T19:58:01+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2023-21971",
      "initial_release_date": "2023-04-19T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-22T19:58:01+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "mysql-connector-java",
            "product": {
              "name": "mysql-connector-java",
              "product_id": "mysql-connector-java",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/mysql-connector-java"
              }
            }
          },
          {
            "category": "product_version",
            "name": "mysql-connector-java",
            "product": {
              "name": "mysql-connector-java",
              "product_id": "mysql-connector-java.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/mysql-connector-java?arch=src"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mysql-connector-java as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:mysql-connector-java"
        },
        "product_reference": "mysql-connector-java",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mysql-connector-java as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:mysql-connector-java"
        },
        "product_reference": "mysql-connector-java",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mysql-connector-java.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:mysql-connector-java.src"
        },
        "product_reference": "mysql-connector-java.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "mysql-connector-java.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:mysql-connector-java.src"
        },
        "product_reference": "mysql-connector-java.src",
        "relates_to_product_reference": "rhel-6-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-21971",
      "cwe": {
        "id": "CWE-410",
        "name": "Insufficient Resource Pool"
      },
      "discovery_date": "2023-05-09T00:00:00+00:00",
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability was found in MySQL Connector. Successful attacks of this vulnerability can result in the unauthorized ability to cause a hang or frequently repeatable crash, resulting in complete denial of service of MySQL Connectors. This issue can also result in an unauthorized update, insert or delete access to some of the MySQL Connectors' accessible data, and unauthorized read access to a subset of MySQL Connectors' accessible data.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-6-els.els:mysql-connector-java",
          "rhel-6-els.els:mysql-connector-java.src",
          "rhel-7-els.els:mysql-connector-java",
          "rhel-7-els.els:mysql-connector-java.src"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2023-21971"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-21971"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2023-21971"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Out of support scope",
          "product_ids": [
            "rhel-6-els.els:mysql-connector-java",
            "rhel-6-els.els:mysql-connector-java.src",
            "rhel-7-els.els:mysql-connector-java",
            "rhel-7-els.els:mysql-connector-java.src"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:H",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM"
          },
          "products": [
            "rhel-6-els.els:mysql-connector-java",
            "rhel-6-els.els:mysql-connector-java.src",
            "rhel-7-els.els:mysql-connector-java",
            "rhel-7-els.els:mysql-connector-java.src"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-6-els.els:mysql-connector-java",
            "rhel-6-els.els:mysql-connector-java.src",
            "rhel-7-els.els:mysql-connector-java",
            "rhel-7-els.els:mysql-connector-java.src"
          ]
        }
      ],
      "title": "Connector/J unspecified vulnerability (CPU April 2023)"
    }
  ]
}