Test ID:	1.3.6.1.4.1.25623.1.0.150461
Category:	Policy
Title:	GaussDB Kernel: Revoking the CREATE Permission from a User with the PUBLIC Role
Summary:	A common user can create malicious functions with the same names as system;functions if the user has the PUBLIC role. In this way, other users can call these;malicious functions by mistake to compromise database security.;If the PUBLIC role has the CREATE permission, any user having this role can create,;view, and modify tables or other database objects in the tablespace of this role.;Therefore, it is recommended that the PUBLIC role do not have the CREATE;Permission.
Description:	Summary: A common user can create malicious functions with the same names as system functions if the user has the PUBLIC role. In this way, other users can call these malicious functions by mistake to compromise database security. If the PUBLIC role has the CREATE permission, any user having this role can create, view, and modify tables or other database objects in the tablespace of this role. Therefore, it is recommended that the PUBLIC role do not have the CREATE Permission. CVSS Score: 0.0 CVSS Vector: AV:L/AC:H/Au:S/C:N/I:N/A:N
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.