CVE-2021-20229

🗓️ 23 Feb 2021 17:40:53Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 270 Views

Flaw in PostgreSQL pre-13.2 allows unauthorized acces

Reporter	Title	Published	Views	Family All 74
ALT Linux	Security fix for the ALT Linux 10 package postgresql13 version 13.2-alt1	11 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql15 version 13.2-alt1	11 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql14 version 13.2-alt1	11 Feb 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2021-20229	26 Jul 202114:44	–	ibm
IBM Security Bulletins	Security Bulletin: Security Bypass Vulnerability in PostgreSQL Affects IBM Connect:Direct Web Services (CVE-2021-20229)	26 May 202105:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	5 May 202105:44	–	ibm
AlpineLinux	CVE-2021-20229	23 Feb 202117:40	–	alpinelinux
ArchLinux	[ASA-202102-31] postgresql: information disclosure	20 Feb 202100:00	–	archlinux
CBLMariner	CVE-2021-20229 affecting package postgresql 12.5-2	20 Jun 202103:47	–	cbl_mariner
Circl	CVE-2021-20229	23 Feb 202120:35	–	circl

NVD

Vulners

Node

postgresql postgresqlRange13.0–13.2

Node

redhat software_collectionsMatch-

redhat enterprise_linuxMatch7.0

redhat enterprise_linuxMatch8.0

Node

fedoraproject fedoraMatch33

[
  {
    "product": "PostgreSQL",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "postgresql 13.2, postgresql 12.6, postgresql 11.11, postgresql 10.16, postgresql 9.6.21, postgresql 9.5.25"
      }
    ]
  }
]

Source	Link
security	www.security.netapp.com/advisory/ntap-20210326-0005/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.gentoo.org/glsa/202105-32

21 Nov 2024 05:46Current

4.4Medium risk

Vulners AI Score4.4

CVSS 24

CVSS 3.14.3

EPSS0.00086

CWE-863