4 matches found
CVE-2021-38140
The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...
9.8CVSS7.3AI score0.0129EPSS
SaveExploits0References1
CVE-2021-38140
The setuser extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after setuser...
9.8CVSS0.0129EPSS
SaveExploits0References2
CVE-2021-38140
The CVE-2021-38140 entry concerns the PostgreSQL set_user extension module (before version 2.0.1). The vulnerability enables privilege escalation via RESET SESSION AUTHORIZATION after a successful set_user() call. The root cause is an improper handling of session authorization state in the set_us...
9.8CVSS9.6AI score0.0129EPSS
SaveExploits0References2Affected Software1
20