Vulnerability in core server (CVE-2023-39418)

🗓️ 10 Aug 2023 00:00:00Reported by PostgreSQL Global Development GroupType

Vulnerability in PostgreSQL 15 `MERGE` Comman

Reporter	Title	Published	Views	Family All 116
IBM Security Bulletins	Security Bulletin: Vulnerability in PostgreSQL affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	11 Mar 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to security bypass due to PostgreSQL (CVE-2023-39418)	19 Feb 202408:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in postgresql 13.16-1.el9_4	8 Jul 202507:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in PostgreSQL [CVE-2023-39418]	27 Feb 202517:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to various issues in postgresql	31 Oct 202518:37	–	ibm
FreeBSD	postgresql-server -- MERGE fails to enforce UPDATE or SELECT row security policies	10 Aug 202300:00	–	freebsd
Tenable Nessus	Amazon Linux 2023 : postgresql15, postgresql15-contrib, postgresql15-llvmjit (ALAS2023-2023-387)	24 Oct 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : postgresql:15 (ALSA-2023:7785)	15 Dec 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : postgresql:15 (ALSA-2023:7884)	22 Dec 202300:00	–	nessus
Tenable Nessus	CentOS 8 : postgresql:15 (CESA-2023:7884)	9 Jan 202400:00	–	nessus