CVE-2018-1280

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

Pivotal Greenplum Arbitrary Command Injection Vulnerability

Pivotal Greenplum is the U.S. Pivotal Software's set of open source parallel data warehouse , it provides a petabyte-scale data volume of fast query and analysis and other functions . A security vulnerability exists in Pivotal Greenplum versions prior to 4.3.10.0. An attacker can exploit the...

Design/Logic Flaw

An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or hav...

CVE-2016-6656

An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or hav...

CVE-2016-6656

An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or hav...

CVE-2016-6656

The CVE-2016-6656 entry pertains to Pivotal Greenplum before 4.3.10.0, where creating external tables via the GPHDFS protocol permits arbitrary command execution. The root cause is the ability for a user with superuser gpadmin rights or with GPHDFS protocol permissions to create a GPHDFS external...

CVE-2016-6656

An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or hav...