Red Hat Security AdvisoryRHSA-2022:1830
postgresql:10 security update
Released 2022-05-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 8) postgresql-10.19-1.module+el8.6.0+13642+78853f5a.aarch64::postgresql:10, postgresql-10.19-1.module+el8.6.0+13642+78853f5a.ppc64le::postgresql:10, postgresql-10.19-1.module+el8.6.0+13642+78853f5a.s390x::postgresql:10 +47
Fixes 1 record
Priority LOW 39
When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject arbitrary SQL queries when a connection is first established,…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.01901 · Published 2022-03-04 · Partial fix CWE-89
