Man-in-the-Middle (MitM)

🗓️ 14 Nov 2021 07:40:11Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 42 Views

Postgresql vulnerability to Man-in-the-Middle attacks

Reporter	Title	Published	Views	Family All 267
IBM Security Bulletins	Security Bulletin: A security vulnerability inPostgreSQL affects IBM Cloud Pak for Multicloud Management Infrastructure Management	21 Oct 202217:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of PostgreSQL, IBM Robotic Process Automation with Automation Anywhere is vulnerable to SQL injection (CVE-2021-23214)	1 Apr 202215:08	–	ibm
IBM Security Bulletins	Security Bulletin: EDB Postgres Advanced Server with IBM and IBM Data Management Platform for EDB Postgres (Standard or Enterprise) for IBM Cloud Pak for Data are vulnerable to SQL injection from "man-in-the-middle" attack.	10 Feb 202217:57	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in PostgreSQL, Node.js, and Data Tables from Spry Media may affect IBM Spectrum Protect Plus	31 Jan 202218:22	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PostreSQL with IBM, EDB Postgres Advanced Server with IBM, IBM Data Management Platform (Enterprise, Standard) are vulnerable to an SQL Injection (CVE-2021-23214)	3 Dec 202120:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Management Platform for EDB Postgres (Standard and Enterprise) for IBM Cloud Pak for Data are vulnerable to SQL injection from "man-in-the-middle" attack	11 Feb 202217:37	–	ibm
IBM Security Bulletins	Security Bulletin: SQL injection vulnerability in PostgreSQL affects IBM Connect:Direct Web Services (CVE-2021-23214)	1 Mar 202219:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with Known Vulnerabilities	25 Apr 202214:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Polkit, PostgreSQL, OpenSSL, OpenSSH, and jQuery affect IBM Spectrum Copy Data Management	12 Mar 202201:53	–	ibm

Vulners

Node

postgresql postgresqlMatch12.7-r0os

AND

postgresql postgresqlMatch12.3-r2os

AND

postgresql postgresqlMatch12.6-r0os

AND

postgresql postgresqlMatch12.8-r0os

AND

alpinelinux alpine_linuxMatch3.12

postgresql postgresqlMatch13.3-r0os

AND

postgresql postgresqlMatch13.4-r0os

AND

alpinelinux alpine_linuxMatch3.14

postgresql postgresqlMatch13.4-r0os

AND

postgresql postgresqlMatch13.3-r0os

AND

postgresql postgresqlMatch13.2-r0os

AND

alpinelinux alpine_linuxMatch3.13

postgresql postgresqlMatch12.2-r0os

AND

postgresql postgresqlMatch12.1-r0os

AND

postgresql postgresqlMatch12.8-r0os

AND

postgresql postgresqlMatch12.6-r0os

AND

postgresql postgresqlMatch12.7-r0os

AND

alpinelinux alpine_linuxMatch3.11

postgresql-11 postgresql-11Match11.10-0+deb10u1debian

AND

postgresql-11 postgresql-11Match11.12-0+deb10u1debian

AND

postgresql-11 postgresql-11Match11.9-0+deb10u1debian

AND

debian debian_linuxMatch10

postgresql-13 postgresql-13Match13.1-1+b1debian

AND

postgresql-13 postgresql-13Match13.3-1debian

AND

postgresql-13 postgresql-13Match13.2-1debian

AND

debian debian_linuxMatch11

postgresql-9.6 postgresql-9.6Match9.6.17-0+deb9u1debian

AND

debian debian_linuxMatch9

google bionicMatch10.3-1debian

AND

google bionicMatch10.18-0ubuntu0.18.04.1debian

AND

google bionicMatch10.14-0ubuntu0.18.04.1debian

AND

google bionicMatch10.15-0ubuntu0.18.04.1debian

AND

debian debian_linux

focal focalMatch12.5-0ubuntu0.20.04.1debian

AND

focal focalMatch12.4-0ubuntu0.20.04.1debian

AND

focal focalMatch12.2-4debian

AND

debian debian_linux

hirsute hirsuteMatch13.1-1build1debian

AND

hirsute hirsuteMatch13.4-0ubuntu0.21.04.1debian

AND

hirsute hirsuteMatch13.2-1debian

AND

debian debian_linux

rh-postgresql12-postgresql rh-postgresql12-postgresqlMatch12.1_2.el7

Source	Link
secdb	www.secdb.alpinelinux.org/v3.12/main.yaml
secdb	www.secdb.alpinelinux.org/v3.11/main.yaml
secdb	www.secdb.alpinelinux.org/edge/community.yaml
secdb	www.secdb.alpinelinux.org/v3.13/main.yaml
secdb	www.secdb.alpinelinux.org/v3.14/main.yaml
secdb	www.secdb.alpinelinux.org/edge/main.yaml
security	www.security.gentoo.org/glsa/202211-04
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
github	www.github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951
git	www.git.postgresql.org/gitweb/

07 Nov 2023 22:21Current

4.6Medium risk

Vulners AI Score4.6

CVSS 25.1

CVSS 3.18.1

EPSS0.00193