CVE-2023-28481

Summary

CVE-2023-28481: A vulnerability has been identified in Tigergraph Enterprise 3.7.0. This issue grants unsecured write access to the SSH authorized keys file. Any processes running as the tigergraph user can add their SSH public key into this file, leading to password-less SSH key access for potential attackers, enabling them to bypass authentication and gain unauthorized access to the system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.