🎯 New Report #3897588: KILL authorization trusts the presented login name instead of the authenticated anonymous account
🔺Severity: null
👽 Reporter: dogeshark
⭐️ Reputation: 403
🛠 State: resolved
💼 Team: MariaDB
💵 Bounty: null
🕐 Submitted: 2026-07-28
⏰ Disclosed: 2026-09-07 19:55:50
📝 Summary: A vulnerability was discovered in the KILL authorization process of a database management system. The vulnerability allowed an anonymous account to terminate connections using a supplied login name, even if the authenticated identity was different. This was because the KILL authorization relied on the presented login name instead of the authenticated account identity.
📂 Report JSON File: 3897588
@hackeronereports