certfr_avis - certfr-2021-avi-663

CERTFR-2021-AVI-663

Vulnerability from certfr_avis

Une vulnérabilité a été découverte dans l'extension set_user de PostgreSQL. Elle permet à un attaquant de provoquer une élévation de privilèges.

Note : l'extension 'set_user' permet d'autoriser une élévation de privilèges pour un utilisateur donné. La vulnérabilité permet d'altérer les privilèges initialement accordés.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	PostgreSQL	PostgreSQL	PostgreSQL set_user versions antérieures à 2.0.1

References

Title

Publication Time

Tags

Bulletin de sécurité PostgreSQL du 28 août 2021

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "PostgreSQL set_user versions ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "PostgreSQL",
        "vendor": {
          "name": "PostgreSQL",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-38140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-38140"
    }
  ],
  "initial_release_date": "2021-08-30T00:00:00",
  "last_revision_date": "2021-08-30T00:00:00",
  "links": [],
  "reference": "CERTFR-2021-AVI-663",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2021-08-30T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans l\u0027extension set_user de\nPostgreSQL. Elle permet \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de\nprivil\u00e8ges.\n\nNote : l\u0027extension \u0027set_user\u0027 permet d\u0027autoriser une \u00e9l\u00e9vation de\nprivil\u00e8ges pour un utilisateur donn\u00e9. La vuln\u00e9rabilit\u00e9 permet d\u0027alt\u00e9rer\nles privil\u00e8ges initialement accord\u00e9s.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans l\u0027extension set_user de PostgreSQL",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 PostgreSQL du 28 ao\u00fbt 2021",
      "url": "https://www.postgresql.org/about/news/set_user-201-released-2279/"
    }
  ]
}

CVE-2021-38140 (GCVE-0-2021-38140)

Vulnerability from cvelistv5

Published

2021-08-10 18:00

Modified

2024-08-04 01:37

Severity ?

CWE

Summary

The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user().

References

URL

Tags

	https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1	x_refsource_MISC
	https://github.com/pgaudit/set_user/releases/tag/REL2_0_1	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T01:37:14.860Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user()."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-08-10T18:00:43",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-38140",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The set_user extension module before 2.0.1 for PostgreSQL allows a potential privilege escalation using RESET SESSION AUTHORIZATION after set_user()."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1",
              "refsource": "MISC",
              "url": "https://github.com/pgaudit/set_user/compare/REL2_0_0...REL2_0_1"
            },
            {
              "name": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1",
              "refsource": "CONFIRM",
              "url": "https://github.com/pgaudit/set_user/releases/tag/REL2_0_1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-38140",
    "datePublished": "2021-08-10T18:00:43",
    "dateReserved": "2021-08-05T00:00:00",
    "dateUpdated": "2024-08-04T01:37:14.860Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2021-AVI-663

Vulnerability from certfr_avis

Solution

CVE-2021-38140 (GCVE-0-2021-38140)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature