CVE-2021-20229: CVE-2021-20229

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-20229

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

授权机制不正确

Source: NVD (National Vulnerability Database)

Vulnerability Title

PostgreSQL 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

PostgreSQL是Postgresql组织的一套自由的对象关系型数据库管理系统。该系统支持大部分SQL标准并且提供了许多其他特性，例如外键、触发器、视图等。 PostgreSQL 存在安全漏洞，攻击者可利用该漏洞可以通过权限绕过对数据的访问限制，以获取敏感信息。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	PostgreSQL	postgresql 13.2, postgresql 12.6, postgresql 11.11, postgresql 10.16, postgresql 9.6.21, postgresql 9.5.25	-

II. Public POCs for CVE-2021-20229

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2021-20229

Please Login to view more intelligence information

https://security.netapp.com/advisory/ntap-20210326-0005/x_refsource_CONFIRM
https://bugzilla.redhat.com/show_bug.cgi?id=1925296x_refsource_MISC
https://security.gentoo.org/glsa/202105-32vendor-advisoryx_refsource_GENTOO
https://nvd.nist.gov/vuln/detail/CVE-2021-20229

IV. Related Vulnerabilities

Same product: PostgreSQL

Same vendor: n/a

Same weakness: CWE-863

V. Comments for CVE-2021-20229

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2021-20229

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2021-20229

III. Intelligence Information for CVE-2021-20229

IV. Related Vulnerabilities

V. Comments for CVE-2021-20229

Leave a comment