CVE-2021-22030

Published: Nov 19, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with access to logs can read sensitive(credentials) information about users

Affected (2)

Products: Greenplum: Greenplum

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Greenplum Greenplum	Before 5.28.14
Greenplum Greenplum	From 6.0.0 to 6.17.0

Related CWEs

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (2)

https://github.com/greenplum-db/gpdb/security/advisories/GHSA-c7w8-gx27-h4mr

Source: security@vmware.com

PatchThird Party Advisory

https://github.com/greenplum-db/gpdb/security/advisories/GHSA-c7w8-gx27-h4mr

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.