PT-2021-14843 · Unknown · Greenplum Database

Published 2021-11-19 · Updated 2021-11-24 · CVE-2021-22028

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Greenplum database versions prior to 5.28.6 Greenplum database versions prior to 6.14.0

Description The issue is related to a file path traversal vulnerability, which can lead to information disclosure from the file system. A malicious user can exploit this to read or write information from the file system.

Recommendations For versions prior to 5.28.6, update to version 5.28.6 or later. For versions prior to 6.14.0, update to version 6.14.0 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2021-22028

GHSA-HQH5-M87W-57W2

Affected Products

Greenplum Database

References · 4

• ❌ https://github.com/greenplum-db/gpdb/security/advisories/GHSA-hqh5-m87w-57w2 · Patch, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-22028 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22028 · Vendor Advisory
• https://t.me/cibsecurity/32723 · Telegram Post