Vulnerability   
Search   
    Search 202850 CVE descriptions
and 87302 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.150369
Category:Policy
Title:openGauss: Revoking the CREATE Permission from a User with the PUBLIC Role
Summary:A common user can create malicious functions with the same names as system;functions if the user has the PUBLIC role. In this way, other users can call these;malicious functions by mistake to compromise database security.;If the PUBLIC role has the CREATE permission, any user having this role can create,;view, and modify tables or other database objects in the tablespace of this role.;Therefore, it is recommended that the PUBLIC role do not have the CREATE;permission.
Description:Summary:
A common user can create malicious functions with the same names as system
functions if the user has the PUBLIC role. In this way, other users can call these
malicious functions by mistake to compromise database security.
If the PUBLIC role has the CREATE permission, any user having this role can create,
view, and modify tables or other database objects in the tablespace of this role.
Therefore, it is recommended that the PUBLIC role do not have the CREATE
permission.

CVSS Score:
0.0

CVSS Vector:
AV:L/AC:H/Au:S/C:N/I:N/A:N

CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 87302 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.