CVE Vulnerabilities

CVE-2023-28479

Published: Aug 15, 2023 | Modified: Aug 19, 2023
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Tigergraph Enterprise 3.7.0. The TigerGraph platform installs a full development toolchain within every TigerGraph deployment. An attacker is able to compile new executables on each Tigergraph system and modify system and Tigergraph binaries.

Affected Software

Name Vendor Start Version End Version
Tigergraph Tigergraph 3.7.0 (including) 3.7.0 (including)

References