A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

🗓️ 27 Feb 2021 08:00:00Reported by MicrosoftType

PostgreSQL before 13.2 flaw lets a user with one column select privilege reveal all table columns.

Reporter	Title	Published	Views	Family All 75
ALT Linux	Security fix for the ALT Linux 10 package postgresql13 version 13.2-alt1	11 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql15 version 13.2-alt1	11 Feb 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package postgresql14 version 13.2-alt1	11 Feb 202100:00	–	altlinux
IBM Security Bulletins	Security Bulletin: PostgreSQL vulnerabilities in IBM Robotic Process Automation with Automation Anywhere - CVE-2021-20229	26 Jul 202114:44	–	ibm
IBM Security Bulletins	Security Bulletin: Security Bypass Vulnerability in PostgreSQL Affects IBM Connect:Direct Web Services (CVE-2021-20229)	26 May 202105:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	5 May 202105:44	–	ibm
AlpineLinux	CVE-2021-20229	23 Feb 202117:40	–	alpinelinux
ArchLinux	[ASA-202102-31] postgresql: information disclosure	20 Feb 202100:00	–	archlinux
BDU FSTEC	The vulnerability of the PostgreSQL database management system, related to deficiencies in authentication mechanisms, allows attackers to gain unauthorized access to protected information.	4 Mar 202100:00	–	bdu_fstec
CBLMariner	CVE-2021-20229 affecting package postgresql 12.5-2	20 Jun 202103:47	–	cbl_mariner