CVE-2023-28480

An issue was discovered in Tigergraph Enterprise 3.7.0

published August 14, 2023

CVSS
—
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform allows users to define new User Defined Functions (UDFs) from C/C++ code. To support this functionality TigerGraph allows users to upload custom C/C++ code which is then compiled and installed into the platform. An attacker who has filesystem access on a remote TigerGraph system can alter the behavior of the database against the will of the database administrator; thus effectively bypassing the built in RBAC controls.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00644 · 50.3th percentile
Published
2023-08-14T00:00Z
EPSS history
Timeline
  • 14 AUG 00:00Z
    An issue was discovered in Tigergraph Enterprise 3.7.0
    cvelistv5