NFA: MySQL ODBC Connectors still showing old version on scan after upgrade

Products

• Network Flow Analysis

Issue/Introduction

If you are still showing Oracle MySQL Connectors on old version on a vulnerability scan after upgrade that is supposed to include newer versions please see this document.

Environment

Network Flow Analysis

 

Cause

Even if NFA is upgraded to a version with a newer version of ODBC Connector does not remove the old pre-existing entries for ODBC Connector left over from previous installs on the registry at times.

 

Resolution

If you check the registry key:

HKLM\SOFTWARE\Wow6432Node\MySQL AB\MySQL Connector

Do you see separate entries that say "8.0.29" and "8.0.33" (or version  "8.0.37" in 24.3.2+)

If so, the solution is that you can safely remove the "extra" registry key:

HKLM\SOFTWARE\Wow6432Node\MySQL AB\MySQL Connector/ODBC 8.0

that points to 8.0.29, and keep the one that points to 8.0.33 (or 8.0.37 in 24.3.2+)

(NOTE that we are only removing the older "32-bit" key.)

For 64-bit: please check the same for this registry directory:

HKLM\SOFTWARE\MySQL AB\MySQL Connector

The release notes here will always have the included versions of the ODBC connector for each NFA release so you can tell which versions should be there and which shouldn't:

NFA 24.3.x Release Notes

NFA 23.3.x Release Notes