PT-2023-18793 · Tigergraph · Tigergraph Enterprise Free Edition

CVE-2023-22950 · Publicado 2023-04-13 · Atualizado 2023-05-04

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TigerGraph Enterprise Free Edition versions 3.x

Description An issue allows data loading jobs in gsql server to read sensitive data from arbitrary locations. This issue affects jobs created by any user with designer permissions.

Recommendations For TigerGraph Enterprise Free Edition versions 3.x, consider restricting designer permissions to minimize the risk of exploitation until a patch is available. As a temporary workaround, restrict access to sensitive data locations to prevent unauthorized reading.

Exploit

Correção

Enumeração de Fraquezas

CWE-669

Identificadores relacionados

CVE-2023-22950

Produtos afetados

Tigergraph Enterprise Free Edition

Referências · 4

• 🔥 https://neo4j.com/security/cve-2023-22950 · Exploit
• https://osv.dev/vulnerability/CVE-2023-22950 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-22950 · Nota de Segurança
• https://dev.tigergraph.com/forum/c/tg-community/announcements/35 · Aviso do Fabricante