Non notée
CVE-2021-23214 When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a…
Description
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established, despite the use of SSL certificate verification and encryption.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| postgresql | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- www.postgresql.org www.postgresql.org
- git.postgresql.org git.postgresql.org
- github.com github.com
- GLSA-202211-04 security.gentoo.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de postgresql
Les 79 CVE de postgresql →
CVE-2026-6471
Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen…
7.2
Élevée
CVE-2026-14671
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating…
8.8
Élevée
CVE-2026-6470
Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and…
4.3
Moyenne
CVE-2026-6464
Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as…
8.1
Élevée