schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated database-level privileges to execute arbitrary code.
References
Link | Resource |
---|---|
https://access.redhat.com/security/cve/CVE-2023-2454 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20230706-0006/ | |
https://www.postgresql.org/support/security/CVE-2023-2454/ | Vendor Advisory |
https://access.redhat.com/security/cve/CVE-2023-2454 | Third Party Advisory |
https://security.netapp.com/advisory/ntap-20230706-0006/ | |
https://www.postgresql.org/support/security/CVE-2023-2454/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 07:58
Type | Values Removed | Values Added |
---|---|---|
References | () https://access.redhat.com/security/cve/CVE-2023-2454 - Third Party Advisory | |
References | () https://security.netapp.com/advisory/ntap-20230706-0006/ - | |
References | () https://www.postgresql.org/support/security/CVE-2023-2454/ - Vendor Advisory |
06 Jul 2023, 19:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Jun 2023, 18:00
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-noinfo | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
First Time |
Postgresql
Redhat enterprise Linux Redhat Postgresql postgresql Fedoraproject Redhat software Collections Fedoraproject fedora |
|
CPE | cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
|
References | (MISC) https://access.redhat.com/security/cve/CVE-2023-2454 - Third Party Advisory | |
References | (MISC) https://www.postgresql.org/support/security/CVE-2023-2454/ - Vendor Advisory |
09 Jun 2023, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-06-09 19:15
Updated : 2024-11-21 07:58
NVD link : CVE-2023-2454
Mitre link : CVE-2023-2454
CVE.ORG link : CVE-2023-2454
JSON object : View
Products Affected
fedoraproject
- fedora
redhat
- software_collections
- enterprise_linux
postgresql
- postgresql
CWE