CVE-2023-41117

An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against search_path attacks.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.enterprisedb.com/docs/security/advisories/cve202341117/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:enterprisedb:postgres_advanced_server::::::::
	cpe:2.3:a:enterprisedb:postgres_advanced_server::::::::
	cpe:2.3:a:enterprisedb:postgres_advanced_server::::::::
	cpe:2.3:a:enterprisedb:postgres_advanced_server::::::::
	cpe:2.3:a:enterprisedb:postgres_advanced_server::::::::

History

14 Dec 2023, 16:55

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-12-12 07:15

Updated : 2024-02-28 20:54

NVD link : CVE-2023-41117

Mitre link : CVE-2023-41117

CVE.ORG link : CVE-2023-41117

JSON object : View

Products Affected

enterprisedb

postgres_advanced_server

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2023-41117", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2023-12-12T07:15:44.727", "references": [{"url": "https://www.enterprisedb.com/docs/security/advisories/cve202341117/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately secured against search_path attacks."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en EnterpriseDB Postgres Advanced Server (EPAS) antes de 11.21.32, 12.x antes de 12.16.20, 13.x antes de 13.12.16, 14.x antes de 14.9.0 y 15.x antes de 15.4.0. Contiene paquetes, paquetes independientes y funciones que ejecutan SECURITY DEFINER pero no est\u00e1n protegidos adecuadamente contra ataques search_path."}], "lastModified": "2023-12-14T16:55:32.230", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6892B548-6E0D-47B5-9AD7-3EA937C243FE", "versionEndExcluding": "11.21.32"}, {"criteria": "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "15246CD4-D4F0-4FE7-AE1A-BDD2FCC67B5C", "versionEndExcluding": "12.16.20", "versionStartIncluding": "12.0.0"}, {"criteria": "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3FA205A-6BF7-492C-A0F3-5AD01E35CC41", "versionEndExcluding": "13.12.17", "versionStartIncluding": "13.0.0"}, {"criteria": "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "12EC69DE-AFB1-476F-88BB-C7C0C348C19F", "versionEndExcluding": "14.9.0", "versionStartIncluding": "14.0.0"}, {"criteria": "cpe:2.3:a:enterprisedb:postgres_advanced_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3B7765D-34FD-479B-9C4E-9CAC34CC1AD2", "versionEndExcluding": "15.4.0", "versionStartIncluding": "15.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}