Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11938
HistoryAug 13, 2020 - 12:00 a.m.

KLA11938 Security vulnerability in PostgreSQL

2020-08-1300:00:00
Kaspersky Lab
threats.kaspersky.com
17

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.7%

JSON

Detect date:

08/13/2020

Severity:

Warning

Description:

Security vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to obtain sensitive information, bypass security restrictions.

Affected products:

PostgreSQL 10 earlier than 10.14
PostgreSQL 11 earlier than 11.9
PostgreSQL 12 earlier than 12.4

Solution:

Update to the latest version
Download PostgreSQL

Original advisories:

PostgreSQL News

Impacts:

OSI

Related products:

PostgreSQL

CVE-IDS:

CVE-2020-143497.1High

Related

postgresql 1
cbl_mariner 1
veracode 1
altlinux 10
nessus 32
openvas 16
photon 5
gentoo 1
osv 4
suse 5
cve 1
alpinelinux 1
redhatcve 1
ibm 5
prion 1
ubuntucve 1
redhat 8
ubuntu 1
debiancve 1
mageia 1
fedora 1
oraclelinux 3
almalinux 1
rocky 1
postgresql
postgresql
Vulnerability in core server (CVE-2020-14349)
2020-08-24 13:15:00
cbl_mariner
cbl_mariner
CVE-2020-14349 affecting package postgresql 12.1-3
2021-06-20 03:47:42
veracode
veracode
SQL Injection
2020-09-07 02:40:01
altlinux
altlinux
Security fix for the ALT Linux 8 package postgresql12 version 12.4-alt0.M80P.1
2020-08-20 00:00:00
Security fix for the ALT Linux 10 package postgresql15 version 12.4-alt1
2020-08-12 00:00:00
Security fix for the ALT Linux 9 package postgresql12-1C version 11.9-alt1
2020-08-12 00:00:00
nessus
nessus
Photon OS 1.0: Postgresql PHSA-2020-1.0-0321
2020-10-21 00:00:00
PostgreSQL 9.5.x < 9.5.23 / 9.6.x < 9.6.19 / 10.x < 10.14 / 11.x < 11.9 / 12.x < 12.4 Multiple Vulnerabilities
2020-08-21 00:00:00
openSUSE Security Update : postgresql12 (openSUSE-2020-1244)
2020-08-24 00:00:00
openvas
openvas
PostgreSQL 10.x < 10.14, 11.x < 11.9, 12.x < 12.4 Search Path Vulnerability - Windows
2020-10-07 00:00:00
openSUSE: Security Advisory for postgresql12 (openSUSE-SU-2020:1244-1)
2020-08-23 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2355-1)
2021-06-09 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2020-0137
2020-09-10 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0137
2020-09-07 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0321
2020-09-05 00:00:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2020-08-26 00:00:00
osv
osv
CVE-2020-14349
2020-08-24 13:15:10
BIT-postgresql-2020-14349
2024-03-06 11:06:51
Important: postgresql:12 security update
2020-12-17 15:30:10
suse
suse
Security update for postgresql10 (important)
2020-09-03 00:00:00
Security update for postgresql10 (important)
2020-09-01 00:00:00
Security update for postgresql, postgresql96, postgresql10, postgresql12 (moderate)
2020-08-17 00:00:00
cve
cve
CVE-2020-14349
2020-08-24 13:15:00
alpinelinux
alpinelinux
CVE-2020-14349
2020-08-24 13:15:00
redhatcve
redhatcve
CVE-2020-14349
2020-08-13 12:43:35
ibm
ibm
Security Bulletin: Search path vulnerability in PostgreSQL Server bundled in IBM Robotic Process Automation with Automation Anywhere (CVE-2020-14349, CVE-2020-14350)
2021-05-07 20:28:45
Security Bulletin: Multiple Vulnerabilities in PostgreSQL Affect IBM Connect:Direct Web Service
2021-05-11 07:01:59
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in PostgreSQL
2020-12-09 04:41:58
prion
prion
Sql injection
2020-08-24 13:15:00
ubuntucve
ubuntucve
CVE-2020-14349
2020-08-17 00:00:00
redhat
redhat
(RHSA-2020:5110) Moderate: rh-postgresql10-postgresql security update
2020-11-16 08:47:34
(RHSA-2021:0988) Moderate: rhvm-appliance security, bug fix, and enhancement update
2021-03-25 11:24:15
(RHSA-2020:5112) Moderate: rh-postgresql12-postgresql security update
2020-11-16 11:44:42
ubuntu
ubuntu
PostgreSQL vulnerabilities
2020-08-25 00:00:00
debiancve
debiancve
CVE-2020-14349
2020-08-24 13:15:00
mageia
mageia
Updated postgresql packages fix security vulnerabilities
2020-09-06 23:33:09
fedora
fedora
[SECURITY] Fedora 33 Update: postgresql-12.6-1.fc33
2021-02-26 01:10:06
oraclelinux
oraclelinux
postgresql:12 security update
2020-12-23 00:00:00
postgresql:10 security and bug fix update
2020-09-09 00:00:00
rh-postgresql10-postgresql security update
2021-06-11 00:00:00
almalinux
almalinux
Important: postgresql:12 security update
2020-12-17 15:30:10
rocky
rocky
postgresql:12 security update
2020-12-17 15:30:10

7.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.7%

JSON
Related for KLA11938
postgresql1cbl_mariner1veracode1altlinux10nessus32openvas16photon5gentoo1osv4suse5cve1alpinelinux1redhatcve1ibm5prion1ubuntucve1redhat8ubuntu1debiancve1mageia1fedora1oraclelinux3almalinux1rocky1