Tigergraph vulnerabilities
We track 3 vulnerabilities in Tigergraph products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 14, 2023.
Latest Tigergraph vulnerabilities
- 8.8 High severity
Tigergraph: Authorization Bypass Through User-Controlled Key
An issue was discovered in Tigergraph Enterprise 3.7.0. There is unsecured write access to SSH authorized keys file. Any code running as the tigergraph user is able to add their SSH public key into the authorised keys file. This allows an attacker to obtain pa
- 8.8 High severity
Cloud: Incorrect Default Permissions
An issue was discovered in TigerGraph Enterprise Free Edition 3.x. It creates an authentication token for internal systems use. This token can be read from the configuration file. Using this token on the REST API provides an attacker with anonymous admin-level
- 8.8 High severity
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query…
The User-Defined Functions (UDF) feature in TigerGraph 3.6.0 allows installation of a query (in the GSQL query language) without proper validation. Consequently, an attacker can execute arbitrary C++ code. NOTE: the vendor's position is "GSQL was behaving as e