Lucene search

CVE-2021-23214

🗓️ 04 Mar 2022 16:08:15Reported by redhatType

Server trust authentication vulnerability

Reporter	Title	Published	Views	Family All 191
IBM Security Bulletins	Security Bulletin: Due to use of PostgreSQL, IBM Robotic Process Automation with Automation Anywhere is vulnerable to SQL injection (CVE-2021-23214)	1 Apr 202215:08	–	ibm
IBM Security Bulletins	Security Bulletin: EDB Postgres Advanced Server with IBM and IBM Data Management Platform for EDB Postgres (Standard or Enterprise) for IBM Cloud Pak for Data are vulnerable to SQL injection from "man-in-the-middle" attack.	10 Feb 202217:57	–	ibm
IBM Security Bulletins	Security Bulletin: SQL injection vulnerability in PostgreSQL affects IBM Connect:Direct Web Services (CVE-2021-23214)	1 Mar 202219:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Management Platform for EDB Postgres (Standard and Enterprise) for IBM Cloud Pak for Data are vulnerable to SQL injection from "man-in-the-middle" attack	11 Feb 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PostreSQL with IBM, EDB Postgres Advanced Server with IBM, IBM Data Management Platform (Enterprise, Standard) are vulnerable to an SQL Injection (CVE-2021-23214)	3 Dec 202120:39	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability inPostgreSQL affects IBM Cloud Pak for Multicloud Management Infrastructure Management	21 Oct 202217:09	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, PostgreSQL, OpenSSL, OpenSSH, and jQuery affect IBM Spectrum Copy Data Management	12 Mar 202201:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media may affect IBM Spectrum Protect Plus	31 Jan 202218:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm

Nvd

Vulners

Node

postgresql postgresqlRange<9.6.24

postgresql postgresqlRange10.0–10.19

postgresql postgresqlRange11.0–11.14

postgresql postgresqlRange12.0–12.9

postgresql postgresqlRange13.0–13.5

postgresql postgresqlMatch14.0

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

Node

redhat software_collectionsMatch1.0

redhat enterprise_linuxMatch8.0

redhat enterprise_linux_for_ibm_z_systemsMatch8.0

redhat enterprise_linux_for_power_little_endianMatch8.0

[
  {
    "vendor": "n/a",
    "product": "postgresql",
    "versions": [
      {
        "version": "Affects v9.6 to v14",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951
security	www.security.gentoo.org/glsa/202211-04
git	www.git.postgresql.org/gitweb/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
postgresql	www.postgresql.org/support/security/CVE-2021-23214/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

04 Mar 2022 16:15Current

8.3High risk

Vulners AI Score8.3

CVSS38.1

EPSS0.002

CWE-89