by Kastro
Paper/Archive/CVE-2021-22028

CVE-2021-22028

vmware — In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to…

EPSS 2%CVSS 9.1
critical.is priorityof 100
44
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 84.3.843 × 2016.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user can read/write information from the file system using this vulnerability.

Affected

ProductAffectedFixed inSource
gpfdist (Greenplum)gpfdist (Greenplum) versions 6.x.0 prior to 6.14.0 and 5.28.x prior to 5.28.6–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

References

refgithub.com/greenplum-db/gpdb/security/advisories/GHSA-hqh5-m87w-57w2