CVE-2023-2455
09.06.2023, 19:15
Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other roles. This scenario can happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Applying an incorrect policy may permit a user to complete otherwise-forbidden reads and modifications. This affects only databases that have used CREATE POLICY to define a row security policy.Enginsight
| Vendor | Product | Version |
|---|---|---|
| postgresql | postgresql | 11.0 ≤ 𝑥 < 11.20 |
| postgresql | postgresql | 12.0 ≤ 𝑥 < 12.15 |
| postgresql | postgresql | 13.0 ≤ 𝑥 < 13.11 |
| postgresql | postgresql | 14.0 ≤ 𝑥 < 14.8 |
| postgresql | postgresql | 15.0 ≤ 𝑥 < 15.3 |
| redhat | software_collections | - |
| redhat | enterprise_linux | 8.0 |
| redhat | enterprise_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| postgresql |
| ||||||||||||||||||||
| postgresql-10 |
| ||||||||||||||||||||
| postgresql-12 |
| ||||||||||||||||||||
| postgresql-14 |
| ||||||||||||||||||||
| postgresql-15 |
| ||||||||||||||||||||
| postgresql-9.1 |
| ||||||||||||||||||||
| postgresql-9.3 |
| ||||||||||||||||||||
| postgresql-9.5 |
|
Common Weakness Enumeration
References