Uncontrolled search path in IVM Development Group pg_ivm
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-427.
Summary
Uncontrolled search path element vulnerability exists in pg_ivm versions prior to 1.5.1. When refreshing an IMMV, pg_ivm executes functions without specifying schema names. Under certain conditions, pg_ivm may be tricked to execute unexpected functions from other schemas with the IMMV owner's privilege. If this vulnerability is exploited, an unexpected function provided by an attacker may be executed with the privilege of the materialized view owner.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| IVM Development Group | pg_ivm | before 1.5.1 | 1.5.1 | Patch available | CNA |
- pg_ivm VendorIVM Development Group Affected before 1.5.1 Fixed in 1.5.1 Patch available CNA
Remediation
- Fix · CNA pg_ivm (IVM Development Group) Fixed in 1.5.1
Timeline
- 2026-10-02 Threatist record created from CVE-2023-23554
- 2026-10-03 Alias added: GHSA-jwqx-q9h3-4q35
References
More Sraoss Pg Ivm vulnerabilities
- TI-2023-09001 Information disclosure in IVM Development Group pg_ivm CVSS 3.1MEDIUM 4.3
Sources
- CVE-2023-23554 · CVE Program
- CVE-2023-23554 · NVD
- FIRST EPSS
- GHSA-jwqx-q9h3-4q35 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences