• Georgi Kodinov's avatar
    Bug #50276: Security flaw in INFORMATION_SCHEMA.TABLES · 2c44919b
    Georgi Kodinov authored
    check_access() returning false for a database does not
    guarantee that the access is granted to it.
    This wrong condition in filling the INFORMATION_SCHEMA
    tables causes extra tables to be returned to the user
    even if he has no rights to see them.
    Fixed by correcting the condition.
    2c44919b
information_schema.test 44.1 KB