MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
NVD-CWE-Other