The vulnerability of the PostgreSQL database management system, related to deficiencies in access control, allows attackers to read and update protected data.

🗓️ 21 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

PostgreSQL vulnerability with access control weaknesses lets attackers read and modify protected data.

Reporter	Title	Published	Views	Family All 117
IBM Security Bulletins	Security Bulletin: Vulnerability in PostgreSQL affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	11 Mar 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to security bypass due to PostgreSQL (CVE-2023-39418)	19 Feb 202408:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in postgresql 13.16-1.el9_4	8 Jul 202507:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in PostgreSQL [CVE-2023-39418]	27 Feb 202517:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to various issues in postgresql	31 Oct 202518:37	–	ibm
FreeBSD	postgresql-server -- MERGE fails to enforce UPDATE or SELECT row security policies	10 Aug 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : postgresql15, postgresql15-contrib, postgresql15-llvmjit (ALAS2023-2023-387)	24 Oct 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : postgresql:15 (ALSA-2023:7785)	15 Dec 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : postgresql:15 (ALSA-2023:7884)	22 Dec 202300:00	–	nessus
Tenable Nessus	CentOS 8 : postgresql:15 (CESA-2023:7884)	9 Jan 202400:00	–	nessus

Vulners

Node

postgresql postgresqlRange<15.4

OR

postgres_professional postgres_pro_certifiedMatch15.4

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-39418
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
git	www.git.postgresql.org/gitweb/
postgresql	www.postgresql.org/support/security/CVE-2023-39418/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023081132
postgrespro	www.postgrespro.ru/products/postgrespro/certified
altsp	www.altsp.su/obnovleniya-bezopasnosti/
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
abf	www.abf.rosa.ru/advisories/ROSA-SA-2024-2486
web	www.web.nvd.nist.gov/view/vuln/detail

05 Mar 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 22.1

CVSS 33.1

EPSS0.00964

PostgreSQL access control data exposure read data update data