Read the docs
TI-2021-19577 Aliases CVE-2021-43767GHSA-xmm7-85wh-j3jf

Insufficiently protected credentials in Odyssey

Priority LOW 27CWE-522Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Information disclosure, Spoofing
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-522 and CWE-295.

Summary

Odyssey passes to client unencrypted bytes from man-in-the-middle When Odyssey storage is configured to use the PostgreSQL server using 'trust' authentication with a 'clientcert' requirement or to use 'cert' authentication, a man-in-the-middle attacker can inject false responses to the client's first few queries. Despite the use of SSL certificate verification and encryption, Odyssey will pass these results to client as if they originated from valid server. This is similar to CVE-2021-23222 for PostgreSQL.

Why it matters now

EPSS 0.00414 35th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—OdysseyOdyssey 1.1—No fix listedCNA
  • Odyssey Vendor— Affected Odyssey 1.1 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*9.6.0 to before 9.6.24; 10.0 to before 10.19; 11.0 to before 11.14; 12.0 to before 12.9; 13.0 to before 13.5VulnerablePostgreSQL
cpe:2.3:a:postgresql:postgresql:14.0:*:*:*:*:*:*:*14.0VulnerablePostgreSQL
  • cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:* Versions 9.6.0 to before 9.6.24; 10.0 to before 10.19; 11.0 to before 11.14; 12.0 to before 12.9; 13.0 to before 13.5 Vulnerable ·PostgreSQL
  • cpe:2.3:a:postgresql:postgresql:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·PostgreSQL

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-43767
  2. 2026-10-03 Alias added: GHSA-xmm7-85wh-j3jf

References

Advisory 1

Other 1

  • TI-2019-06651 In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and… CVSS 3.0HIGH 7.2
  • TI-2017-05187 Improper authentication in postgresql CVSS 3.0CRITICAL 9.8
  • TI-2020-15711 SQL injection in postgresql CVSS 3.1HIGH 8.8
  • TI-2013-01675 Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9… CVSS 2.0MEDIUM 6.5
  • TI-2007-03176 The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE… CVSS 2.0HIGH 9.0
  • TI-2022-01423 SQL injection in postgresql CVSS 3.1HIGH 8.8
See all 202 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences