The vulnerability of the PostgreSQL database management system, related to improper access control, allows a perpetrator to gain access to confidential data.

🗓️ 13 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru

PostgreSQL vulnerability permits remote attacker to read confidential data due to improper access control and policy flaw.

Reporter	Title	Published	Views	Family All 155
FreeBSD	PostgreSQL -- Selectivity estimators bypass row security policies	9 May 201900:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package postgresql12 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.13-alt0.M80P.1	14 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql15 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql13 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package postgresql12 version 11.3-alt1	8 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql10 version 10.8-alt0.M80P.1	14 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql12 version 11.3-alt0.M80P.1	9 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql11 version 11.3-alt0.M80P.1	14 May 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package postgresql9.6 version 9.6.13-alt1	8 May 201900:00	–	altlinux

Vulners

Node

postgresql postgresqlRange11.0–11.3

OR

postgresql postgresqlRange10.0–10.8

OR

postgresql postgresqlRange9.5.0–9.5.17

OR

postgresql postgresqlRange9.6.0–9.6.13

OR

postgres_professional postgres_pro_certifiedRange<11.11.1

OR

novell opensuse_leapMatch15.0

OR

novell opensuse_leapMatch15.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10130
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-10130
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20201207SE16MD
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20210611SE16
wiki	www.wiki.astralinux.ru/pages/viewpage.action
postgresql	www.postgresql.org/about/news/1939/
suse	www.suse.com/security/cve/CVE-2019-10130/
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20211019SE81
postgrespro	www.postgrespro.ru/products/postgrespro/certified
web	www.web.nvd.nist.gov/view/vuln/detail

11 Aug 2023 00:00Current

CVSS 24

CVSS 34.3

EPSS0.00254

PostgreSQL access control flaw security policy flaw select privileges confidential data remote attacker