{"id":"CVE-2016-6656","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-6656","generatedAt":"2026-10-28T21:56:20.366Z","title":"Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system.","description":"An issue was discovered in Pivotal Greenplum before 4.3.10.0. Creation of external tables using GPHDFS protocol has a vulnerability whereby arbitrary commands can be injected into the system. In order to exploit this vulnerability the user must have superuser 'gpadmin' access to the system or have been granted GPHDFS protocol permissions in order to create a GPHDFS external table.","published":"2016-12-16T09:59:00.000Z","lastModified":"2026-06-17T00:51:33.000Z","status":"Modified","sourceIdentifier":"security_alert@emc.com","cvss":{"version":"3.0","score":7.2,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-77"],"affected":["pivotal software/greenplum"],"epss":{"score":0.01111,"percentile":0.65784,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (1.11%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/94954","source":"security_alert@emc.com"},{"url":"https://pivotal.io/security/cve-2016-6656","tags":["Mitigation","Vendor Advisory"],"source":"security_alert@emc.com"},{"url":"http://www.securityfocus.com/bid/94954","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://pivotal.io/security/cve-2016-6656","tags":["Mitigation","Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-6656","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}