CVE-2023-22948

Katalog CVE

CVSS 4.9 · Medium EPSS 0,44%

Kerentanan Missing Encryption of Sensitive Data pada tigergraph. Skor CVSS 3.1 4.9 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in TigerGraph Enterprise Free Edition 3.x. There is unsecured read access to an SSH private key. Any code that runs as the tigergraph user is able to read the SSH private key. With this, an attacker is granted password-less SSH access to all machines in the TigerGraph cluster.

Rincian

Terbit di NVD

13 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-311: Missing Encryption of Sensitive Data

EPSS (30 hari)

0,44% peluang dieksploitasi; lebih tinggi dari 36,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://dev.tigergraph.com/forum/c/tg-community/announcements/35 advisory vendor
• https://neo4j.com/security/cve-2023-22948/ exploit · advisory pihak ketiga