CVE-2006-0369
** DISPUTED ** MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive...
MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access
Exploit likelihood
What each source reports
NVD Score used
MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access
- Record
CVE-2006-0369- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access
- Record
CVE-2006-0369- Updated
- 2026-11-02
EUVDEUVD-2006-0376 No score
MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access
- Record
EUVD-2006-0376- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wq2p-hcf7-x7cq No score
** DISPUTED ** MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive...
** DISPUTED ** MySQL 5.0.18 allows local users with access to a VIEW to obtain sensitive information via the "SELECT * FROM information_schema.views;" query, which returns the query that created the VIEW. NOTE: this issue has been disputed by third parties, saying that the availability of the schema is a normal and sometimes desired aspect of database access.
- Record
GHSA-wq2p-hcf7-x7cq- Weakness
- CWE-200
- Updated
- 2026-11-02
OSVBELL-CVE-2006-0369
CVE-2006-0369 does not affect BellSoft software
- Record
BELL-CVE-2006-0369- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0369 is a low vulnerability (CVSS 2.1) in Oracle Mysql, published January 22, 2006. Its validity is disputed. EPSS puts the chance of exploitation in the next 30 days at 0.80%, the 56th percentile.