Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Greenplum Component: Greenplum Clear all filters
TI-2021-05072 CVE-2021-22028

Path traversal in gpfdist

Priority MEDIUM 44

In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02432 Published 2021-11-19 No fix listed CWE-22
TI-2021-05074 CVE-2021-22030

Sensitive information in log files in GPDB

Priority LOW 31

In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01004 Published 2021-11-19 No fix listed CWE-532