MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.
CVSS Metrics