GCP-SQL-MySQL-Local-Infile-Disabled

Owned by naveen
Dec 08, 2021
1 min read

Severity : High

Description : SQL instances for MySQL type database provides local_infile flag, which can be used to load data from client or server systems. It controls the load data statements for database. Anyone using this server can access any file on the client system. For security reasons it should be disabled.

Remediation Steps : Ensure that local infile flag is disabled for all MySQL instances.

Blue Hexagon Proprietary