CVE-2018-1280

Summary

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents.

Affected Software

VendorProductVersion RangeStatus
PivotalGreenplum Command Center2.x prior to 2.5.1.affected

Weaknesses

  • SQL Injection

ADP Enrichment

CVE Program Container

Additional References

References