Vulnerabilities > Teradata

DATE CVE VULNERABILITY TITLE RISK
2019-01-21 CVE-2019-6499 Use of Hard-coded Credentials vulnerability in Teradata Viewpoint 16.20.00.02B80
Teradata Viewpoint before 14.0 and 16.20.00.02-b80 contains a hardcoded password of TDv1i2e3w4 for the viewpoint database account (in viewpoint-portal\conf\server.xml) that could potentially be exploited by malicious users to compromise the affected system.
network
teradata CWE-798
critical
9.3
2017-05-23 CVE-2015-5401 Improper Input Validation vulnerability in Teradata Express and Teradata Gateway
Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.00.02.08_Sles11 allow remote attackers to cause a denial of service (database crash) via a malformed CONFIG REQUEST message.
network
low complexity
teradata CWE-20
5.0
2016-11-10 CVE-2016-7490 Permissions, Privileges, and Access Controls vulnerability in Teradata Studio Express 15.12.00.00
The installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates files in /tmp insecurely.
local
low complexity
teradata CWE-264
7.2
2016-11-10 CVE-2016-7489 Permissions, Privileges, and Access Controls vulnerability in Teradata Virtual Machine 15.10
Teradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl creates files in /tmp in an insecure manner, this may lead to elevated code execution.
network
low complexity
teradata CWE-264
critical
10.0
2016-11-10 CVE-2016-7488 Permissions, Privileges, and Access Controls vulnerability in Teradata Virtual Machine 15.10
Teradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex/pkgmgr.
local
low complexity
teradata CWE-264
7.2