ID de Prueba:	1.3.6.1.4.1.25623.1.0.150369
Categoría:	Policy
Título:	openGauss: Revoking the CREATE Permission from a User with the PUBLIC Role
Resumen:	A common user can create malicious functions with the same names as system;functions if the user has the PUBLIC role. In this way, other users can call these;malicious functions by mistake to compromise database security.;If the PUBLIC role has the CREATE permission, any user having this role can create,;view, and modify tables or other database objects in the tablespace of this role.;Therefore, it is recommended that the PUBLIC role do not have the CREATE;permission.
Descripción:	Summary: A common user can create malicious functions with the same names as system functions if the user has the PUBLIC role. In this way, other users can call these malicious functions by mistake to compromise database security. If the PUBLIC role has the CREATE permission, any user having this role can create, view, and modify tables or other database objects in the tablespace of this role. Therefore, it is recommended that the PUBLIC role do not have the CREATE permission. CVSS Score: 0.0 CVSS Vector: AV:L/AC:H/Au:S/C:N/I:N/A:N
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.