Medium severity6.5NVD Advisory· Published Apr 27, 2020· Updated Jun 17, 2026

CVE-2020-10997

Description

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Percona/Xtrabackup2 versions
cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:percona:xtrabackup:*:*:*:*:*:*:*:*range: >=2.4.11,<2.4.20
- (no CPE)range: <2.4.20
Percona/XtraBackupdescription
osv-coords4 versions
pkg:bitnami/percona-xtrabackup pkg:bitnami/percona-xtrabackup-binary pkg:rpm/opensuse/xtrabackup&distro=openSUSE%20Leap%2015.4 pkg:rpm/suse/xtrabackup&distro=SUSE%20Package%20Hub%2015%20SP4
>= 2.4.11, < 2.4.20+ 3 more
- (no CPE)range: >= 2.4.11, < 2.4.20
- (no CPE)range: >= 2.4.11, < 2.4.20
- (no CPE)range: < 2.4.26-bp154.2.3.1
- (no CPE)range: < 2.4.26-bp154.2.3.1

Patches

Vulnerability mechanics

References

jira.percona.com/browse/PXB-2142nvdVendor Advisory
www.percona.com/blog/2020/04/16/cve-2020-10997-percona-xtrabackup-information-disclosure-of-command-line-arguments/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000