A man-in-the-middle attacker can inject false responses to the client's first few queries despite the use of SSL certificate verification and encryption.

🗓️ 11 Mar 2022 08:00:00Reported by MicrosoftType

A man-in-the-middle can inject false responses to initial queries despite Secure Sockets Layer verification and encryption.

Reporter	Title	Published	Views	Family All 223
IBM Security Bulletins	Security Bulletin: IBM Spectrum Protect Plus is vulnerable to PostgreSQL Man-in-the-Middle and Slowloris Denial of Service attacks (CVE-2021-23222, CVE-2022-22354)	11 Mar 202216:31	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability inPostgreSQL affects IBM Cloud Pak for Multicloud Management Infrastructure Management	21 Oct 202217:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities	8 Nov 202216:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, PostgreSQL, OpenSSL, OpenSSH, and jQuery affect IBM Spectrum Copy Data Management	12 Mar 202201:53	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package postgresql15 version 14.1-alt1	10 Nov 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql12 version 12.9-alt0.M80P.1	21 Dec 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 9 package postgresql12 version 12.9-alt0.M90P.1	3 Dec 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql9.6 version 9.6.24-alt0.M80P.1	21 Dec 202100:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 8 package postgresql11-1C version 11.12-alt0.M80P.2	21 Dec 202100:00	–	altlinux