high7.5
CVE-2018-1280
Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability.
Impact
Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pivotal Software | Greenplum Command Center | from 2.0.0 before 2.5.1 |