Vulnerability Description
An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Pivotal Software | Greenplum | <= 4.3.9.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/94954
- https://pivotal.io/security/cve-2016-6656MitigationVendor Advisory
- http://www.securityfocus.com/bid/94954
- https://pivotal.io/security/cve-2016-6656MitigationVendor Advisory
FAQ
What is CVE-2016-6656?
CVE-2016-6656 is a vulnerability with a CVSS score of 7.2 (HIGH). An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order...
How severe is CVE-2016-6656?
CVE-2016-6656 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-6656?
Check the references section above for vendor advisories and patch information. Affected products include: Pivotal Software Greenplum.