CVE-2023-28482

Summary

CVE-2023-28482 is a vulnerability affecting Tigergraph Enterprise 3.7.0. This issue allows any user with permissions to upload data on a single TigerGraph instance to access data uploaded by other users, regardless of their permissions. Multiple graphs hosted on the instance can be impacted, potentially leading to a breach of confidential data. The TigerGraph platform does not offer adequate protection for data confidentiality on the remote server.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.