An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full development toolchain within every TigerGraph deployment. An attacker is able to compile new executables on each Tigergraph system and modify system and Tigergraph binaries.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tigergraph | Tigergraph | 3.7.0 (including) | 3.7.0 (including) |