// For flags

CVE-2021-22030

 

Severity Score

6.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with access to logs can read sensitive(credentials) information about users

En las versiones de Greenplum database anteriores a 5.28.14 y 6.17.0, una ejecución de determinadas sentencias conllevaba a un almacenamiento de información confidencial (credenciales) en los registros de la base de datos. Un usuario malicioso con acceso a los registros puede leer información confidencial(credenciales) sobre los usuarios

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
None
Availability
None
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2021-01-04 CVE Reserved
  • 2021-11-19 CVE Published
  • 2023-06-12 EPSS Updated
  • 2024-08-03 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-532: Insertion of Sensitive Information into Log File
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Greenplum
Search vendor "Greenplum"
 Greenplum
Search vendor "Greenplum" for product "Greenplum"
 < 5.28.14
Search vendor "Greenplum" for product "Greenplum" and version " < 5.28.14"
-
Affected
Greenplum
Search vendor "Greenplum"
 Greenplum
Search vendor "Greenplum" for product "Greenplum"
 >= 6.0.0 < 6.17.0
Search vendor "Greenplum" for product "Greenplum" and version " >= 6.0.0 < 6.17.0"
-
Affected