PT-2023-21751 · Tigergraph · Tigergraph Enterprise

Published 2023-08-14 · Updated 2023-08-21 · CVE-2023-28481

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tigergraph Enterprise version 3.7.0

Description An issue was discovered in Tigergraph Enterprise where there is unsecured write access to the SSH authorized keys file. Any code running as the tigergraph user is able to add their SSH public key into the authorized keys file. This allows an attacker to obtain password-less SSH key access by using their own SSH key.

Recommendations For Tigergraph Enterprise version 3.7.0, consider restricting write access to the SSH authorized keys file to prevent unauthorized modifications. As a temporary workaround, monitor the authorized keys file for any suspicious additions and remove any unauthorized SSH keys. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2023-28481

Affected Products

Tigergraph Enterprise

References · 6

• 🔥 https://neo4j.com/security/cve-2023-28481 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-28481 · Security Note
• https://osv.dev/vulnerability/CVE-2023-28481 · Vendor Advisory
• https://twitter.com/CVEnew/status/1691157395018330112 · Twitter Post
• https://t.me/cibsecurity/68464 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1691190249995550720 · Twitter Post