Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Incorrect Authorization Vulnerability - CVE-2021-20229 - Vulnerability Database
PostgreSQL

PostgreSQL Incorrect Authorization Vulnerability - CVE-2021-20229

Medium
Reference: CVE-2021-20229
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-20229
Title: PostgreSQL Incorrect Authorization Vulnerability
Overview:

A flaw was found in PostgreSQL in versions before 13.2 before 12.6 before 11.11 before 10.16 before 9.6.21 and before 9.5.25. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.