Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Missing Authorization Vulnerability - CVE-2020-1720 - Vulnerability Database
PostgreSQL

PostgreSQL Missing Authorization Vulnerability - CVE-2020-1720

Medium
Reference: CVE-2020-1720
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-1720
Title: PostgreSQL Missing Authorization Vulnerability
Overview:

A flaw was found in PostgreSQL39s quotALTER ... DEPENDS ON EXTENSIONquot where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function triggers et al. leading to database corruption. This issue affects PostgreSQL versions before 12.2 before 11.7 before 10.12 and before 9.6.17.