{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "SQL GRANT PROXY ON CURRENT_USER() TO 'victim_admin'@'%' IDENTIFIED VIA '' OR mysql_native_password USING PASSWORD('hacked') over MySQL TCP protocol (port 3306) as a USAGE-only authenticated user",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "docker:mariadb:12.3.2@sha256:a02fe89cb597d4375812b2eac90cf9d0775d4686daa7f7cc750ebbcad7525bbc",
    "docker:mariadb:12.3.3@sha256:dd9b303aed4f4890ed09f766d8ca9ddfd176c0c6f6267feff53b3192ec65a979"
  ],
  "target_identity": {
    "repository_url": "https://github.com/MariaDB/server",
    "commit_sha": null,
    "target_digest": "sha256:a02fe89cb597d4375812b2eac90cf9d0775d4686daa7f7cc750ebbcad7525bbc",
    "runtime_digest": "sha256:a02fe89cb597d4375812b2eac90cf9d0775d4686daa7f7cc750ebbcad7525bbc",
    "platform": "linux",
    "architecture": "amd64"
  },
  "proof_artifacts": [
    "logs/repro/vuln_attempt_1.log",
    "logs/repro/vuln_attempt_2.log",
    "logs/repro/fixed_attempt_1.log",
    "logs/repro/fixed_attempt_2.log",
    "repro/evidence/vuln_1.json",
    "repro/evidence/vuln_2.json",
    "repro/evidence/fixed_1.json",
    "repro/evidence/fixed_2.json"
  ],
  "artifact_sha256": {
    "logs/repro/vuln_attempt_1.log": "16cfc1ac1cc1f4dd28910e5bf31d744c509d49cd5d480f16f3b83e71297e031f",
    "logs/repro/vuln_attempt_2.log": "11085b6c7c174d508a2959e036d9c81a433b9d17143ecef544b6f16bd5726d5a",
    "logs/repro/fixed_attempt_1.log": "84e34777a044579e4e3cbb718e2d0dbb841e67718b2e85d678581b14f7091758",
    "logs/repro/fixed_attempt_2.log": "e3c96c0af8742c0a81f198afa84cf9f422382d995e4b6f292a5f1f5d65b226e6",
    "repro/evidence/vuln_1.json": "04fdd2749aff59d5b161e1a1c66751848f719af70ba08154f986cd99ef59db4f",
    "repro/evidence/vuln_2.json": "0f5889d1cad6d23f5695ae24ca4f3a1be3dbc0618e959987a3f17e42028f5f4d",
    "repro/evidence/fixed_1.json": "e812ec146eabd6ccaca3e7a11b2762bf4f37b82bf644b55ba1349c4b744d0c08",
    "repro/evidence/fixed_2.json": "091de780f9feed834f2b7031e076e0f6ccca328f95b4112094286da53bf4adde"
  },
  "notes": "vulnerable=mariadb:12.3.2 takeovers=2/2; fixed=mariadb:12.3.3 resisted=2/2. Vulnerable build lets a USAGE-only user overwrite an admin account's stored credentials (second auth node persisted while empty first node bypasses has_auth()); fixed build rejects with ERROR 1044 Access denied to database 'mysql'."
}