Lucene search

K
freebsdFreeBSDD53C30C1-0D7B-11EF-BA02-6CC21735F730
HistoryMay 09, 2024 - 12:00 a.m.

PostgreSQL server -- Potentially allowing authenicated database users to see data that they shouldn't.

2024-05-0900:00:00
vuxml.freebsd.org
9
postgresql
security vulnerability
system views
unauthorized access

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

PostgreSQL project reports:

    A security vulnerability was found in the system views pg_stats_ext
    and pg_stats_ext_exprs, potentially allowing authenticated database
    users to see data they shouldn't.  If this is of concern in your
    installation, run the SQL script /usr/local/share/postgresql/fix-CVE-2024-4317.sql
    for each of your databases. See the link for details.
OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchpostgresql-server< 16.3UNKNOWN

3.1 Low

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

7.7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%