description: In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user can read/write information from the file system using this vulnerability.
problem types: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
product: gpfdist (Greenplum)
vendor: n/a
versions:
status: affected, version: gpfdist (Greenplum) versions 6.x.0  prior to 6.14.0 and 5.28.x prior to 5.28.6
}