CVE-2021-22030 - CVE House
Back to Database
Status published Medium CVE-2021-22030

In versions of Greenplum database prior to 5.28.14 and 6.17.0,...

Vulnerability Description

In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with access to logs can read sensitive(credentials) information about users

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-22030

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

GPDB (Greenplum database)
Vulnerable Versions:
gpfdist (Greenplum) versions 6.x prior to 6.17.0 and 5.28.x prior to 5.28.14

Timeline

Official Publish: November 19th, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)