Test Kennung:	1.3.6.1.4.1.25623.1.0.150369
Kategorie:	Policy
Titel:	openGauss: Revoking the CREATE Permission from a User with the PUBLIC Role
Zusammenfassung:	A common user can create malicious functions with the same names as system;functions if the user has the PUBLIC role. In this way, other users can call these;malicious functions by mistake to compromise database security.;If the PUBLIC role has the CREATE permission, any user having this role can create,;view, and modify tables or other database objects in the tablespace of this role.;Therefore, it is recommended that the PUBLIC role do not have the CREATE;permission.
Beschreibung:	Summary: A common user can create malicious functions with the same names as system functions if the user has the PUBLIC role. In this way, other users can call these malicious functions by mistake to compromise database security. If the PUBLIC role has the CREATE permission, any user having this role can create, view, and modify tables or other database objects in the tablespace of this role. Therefore, it is recommended that the PUBLIC role do not have the CREATE permission. CVSS Score: 0.0 CVSS Vector: AV:L/AC:H/Au:S/C:N/I:N/A:N
Copyright	Copyright (C) 2020 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.