Lucene search
IBM59AFB94946BE235CF5876C359B529DE6F0B6EA75C70C4358AF7A85A7A91A213FHistoryMay 11, 2021 - 7:02 a.m.
Security Bulletin: Security Bypass Vulnerability in PostgreSQL Affect IBM Connect:Direct Web Service
2021-05-1107:02:51
www.ibm.com
20
postgresql
ibm connect:direct
security bypass
vulnerability
fix central
EPSS
0.001
Percentile
28.9%
Summary
Security bypass vulnerability in PostgreSQL versions used by IBM Connect:Direct Web Service. IBM Connect:Direct Web Services has addressed the applicable CVEs.
Vulnerability Details
CVEID:CVE-2020-1720
**DESCRIPTION:**PostgreSQL could allow a remote authenticated attacker to bypass security restrictions, caused by improper authorization validation by the ALTER … DEPENDS ON EXTENSION sub-commands. By sending a specially-crafted request, an attacker could exploit this vulnerability to drop any function, procedure, materialized view, index, or trigger under certain conditions.
CVSS Base score: 8.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/176286 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| Sterling Connect Direct Web Services | 1.0 |
| IBM Connect:Direct Web Services | 6.0 |
Remediation/Fixes
Apply 6.1.0.5, available on Fix Central
Workarounds and Mitigations
None
Related
debian
debian
[SECURITY] [DSA 4622-1] postgresql-9.6 security update
2020-02-13 21:36:36
[SECURITY] [DLA 2105-1] postgresql-9.4 security update
2020-02-17 11:28:08
[SECURITY] [DSA 4623-1] postgresql-11 security update
2020-02-13 21:37:19
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2020:0715-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2149-1)
2021-04-19 00:00:00
Mageia: Security Advisory (MGASA-2020-0095)
2022-01-28 00:00:00
nessus
nessus
Debian DLA-2105-1 : postgresql-9.4 security update
2020-02-18 00:00:00
Photon OS 1.0: Postgresql PHSA-2020-1.0-0287
2020-04-15 00:00:00
Ubuntu 18.04 LTS : PostgreSQL vulnerability (USN-4282-1)
2020-02-19 00:00:00
ubuntucve
ubuntucve
CVE-2020-1720
2020-02-13 00:00:00
cve
cve
CVE-2020-1720
2020-03-17 16:15:11
altlinux
altlinux
cvelist
cvelist
CVE-2020-1720
2020-03-17 15:28:24
postgresql
postgresql
Vulnerability in core server (CVE-2020-1720)
2020-02-13 00:00:00
f5
f5
K34120074 : PostgreSQL vulnerability CVE-2020-1720
2020-07-24 00:00:00
kaspersky
kaspersky
KLA11675 Authorization check vulnerability in PostgreSQL
2020-02-13 00:00:00
ibm
ibm
Security Bulletin: A security vulnerability in postgresql affects the IBM Cloud Pak for Multicloud Management Infrastructure Management Appliance
2020-10-21 01:03:50
osv
osv
postgresql-11 - security update
2020-02-13 00:00:00
CVE-2020-1720
2020-03-17 16:15:11
postgresql-9.4 - security update
2020-02-17 00:00:00
mageia
mageia
Updated postgresql packages fix security vulnerability
2020-02-22 02:06:01
ubuntu
ubuntu
PostgreSQL vulnerability
2020-02-18 00:00:00
freebsd
freebsd
debiancve
debiancve
CVE-2020-1720
2020-03-17 16:15:11
suse
suse
Security update for postgresql10 (low)
2020-03-10 00:00:00
Security update for postgresql96, postgresql10 and postgresql12 (moderate)
2020-08-17 00:00:00
alpinelinux
alpinelinux
CVE-2020-1720
2020-03-17 16:15:11
redhatcve
redhatcve
CVE-2020-1720
2020-02-17 09:44:26
cbl_mariner
cbl_mariner
CVE-2020-1720 affecting package postgresql 12.1-3
2021-06-20 03:47:42
prion
prion
Authorization
2020-03-17 16:15:00
nvd
nvd
CVE-2020-1720
2020-03-17 16:15:11
redhat
redhat
(RHSA-2020:5112) Moderate: rh-postgresql12-postgresql security update
2020-11-16 11:44:42
(RHSA-2020:0980) Moderate: rh-postgresql10-postgresql security update
2020-03-26 11:47:39
(RHSA-2020:4295) Moderate: rh-postgresql96-postgresql security update
2020-10-21 12:43:33
rosalinux
rosalinux
Advisory ROSA-SA-2024-2449
2024-07-09 13:00:14
amazon
amazon
Medium: postgresql96
2020-10-26 18:29:00
gentoo
gentoo
PostgreSQL: Multiple vulnerabilities
2020-03-12 00:00:00
oraclelinux
oraclelinux
postgresql:10 security and bug fix update
2020-09-09 00:00:00
postgresql:12 security update
2020-12-23 00:00:00
postgresql:9.6 security update
2020-12-23 00:00:00
almalinux
almalinux
Important: postgresql:12 security update
2020-12-17 15:30:10
Important: postgresql:9.6 security update
2020-12-17 15:20:53
rocky
rocky
postgresql:12 security update
2020-12-17 15:30:10
photon
photon
Important Photon OS Security Update - PHSA-2020-0227
2020-04-08 00:00:00
Critical Photon OS Security Update - PHSA-2020-0080
2020-04-14 00:00:00
EPSS
0.001
Percentile
28.9%
Related for 59AFB94946BE235CF5876C359B529DE6F0B6EA75C70C4358AF7A85A7A91A213F