Security Advisory

CVE-2023-28480

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-08-14 00:00:00

Last updated 2024-10-09 16:20:51

Assigner mitre

State PUBLISHED

Description

An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions (UDFs) from C/C++ code. To support this functionality TigerGraph allows users to upload custom C/C++ code which is then compiled and installed into the platform. An attacker who has filesystem access on a remote TigerGraph system can alter the behavior of the database against the will of the database administrator; thus effectively bypassing the built in RBAC controls.

← Browse all CVEs View on cve.org ↗