CVE-2026-47847

{"id": "CVE-2026-47847", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-47847", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-18T20:24:19.143214Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@vmware.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@vmware.com", "affectedData": [{"vendor": "Bitnami", "product": "bitnami/mariadb-galera", "versions": [{"status": "affected", "version": "10.6.0", "lessThan": "10.6.27-photon-5-r0", "versionType": "custom"}, {"status": "affected", "version": "10.11.0", "lessThan": "10.11.17-photon-5-r1", "versionType": "custom"}, {"status": "affected", "version": "11.4.0", "lessThan": "11.4.12-photon-5-r0", "versionType": "custom"}, {"status": "affected", "version": "11.8.0", "lessThan": "11.8.7-photon-5-r1", "versionType": "custom"}, {"status": "affected", "version": "12.3.0", "lessThan": "12.3.2-photon-5-r0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Bitnami", "product": "bitnami/mariadb-galera Helm chart", "versions": [{"status": "affected", "version": "0", "lessThan": "18.3.0", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-06-18T20:16:13.740", "references": [{"url": "https://github.com/bitnami/containers/security/advisories/GHSA-xcv9-cg8m-3mf2", "source": "security@vmware.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@vmware.com", "description": [{"lang": "en", "value": "CWE-798"}]}], "descriptions": [{"lang": "en", "value": "Bitnami MariaDB Galera container images and Helm chart are affected by a hardcoded default credential vulnerability in the Galera replication health-check user. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables defaulted to monitor and monitor respectively. This user is granted REPLICATION CLIENT privileges from any host ('%'). The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, resulting in all chart deployments using this publicly known credential by default.\n\nAffected versions \u2014 Container image: 10.6.x prior to 10.6.27-photon-5-r0; 10.11.x prior to 10.11.17-photon-5-r1; 11.4.x prior to 11.4.12-photon-5-r0; 11.8.x prior to 11.8.7-photon-5-r1; 12.3.x prior to 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Helm chart: prior to 18.3.0."}, {"lang": "es", "value": "Las im\u00e1genes de contenedor Bitnami MariaDB Galera y el chart de Helm est\u00e1n afectadas por una vulnerabilidad de credenciales predeterminadas codificadas en el usuario de verificaci\u00f3n de estado de replicaci\u00f3n de Galera. Las variables de entorno MARIADB_REPLICATION_USER y MARIADB_REPLICATION_PASSWORD se establecieron por defecto en \u2019monitor\u2019 y \u2019monitor\u2019 respectivamente. A este usuario se le otorgan privilegios de REPLICATION CLIENT desde cualquier host (\u2019%\u2019). El chart de Helm de Bitnami para MariaDB Galera no expon\u00eda par\u00e1metros para configurar las credenciales de este usuario, lo que resultaba en que todas las implementaciones del chart utilizaran esta credencial p\u00fablicamente conocida por defecto.\n\nVersiones afectadas - Imagen de contenedor: 10.6.x anteriores a 10.6.27-photon-5-r0; 10.11.x anteriores a 10.11.17-photon-5-r1; 11.4.x anteriores a 11.4.12-photon-5-r0; 11.8.x anteriores a 11.8.7-photon-5-r1; 12.3.x anteriores a 12.3.2-photon-5-r0 / 12.3.2-debian-12-r0. Chart de Helm: anteriores a 18.3.0."}], "lastModified": "2026-10-25T23:10:00.167", "sourceIdentifier": "security@vmware.com"}