Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:38225
HistoryNov 24, 2022 - 7:01 a.m.

Information Disclosure

2022-11-2407:01:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
postgresql
jdbc driver
information disclosure
vulnerable
streamwrapper
file permissions.

EPSS

0.001

Percentile

23.5%

JSON

Postgresql JDBC Driver is vulnerable to Information Disclosure. The vulnerability exists due to StreamWrapper parameterized constructor in StreamWrapper.java creating a temporary file if the InputStream is larger than 51200 bytes which allows an attacker to read the file due to incorrect file permissions.

References

Related

ubuntucve 1
nessus 20
openvas 5
oraclelinux 2
alpinelinux 1
atlassian 1
almalinux 2
fedora 1
redhat 12
debiancve 1
debian 1
ibm 23
cnvd 1
cvelist 2
osv 7
prion 2
cve 2
broadcom 1
nvd 2
redhatcve 1
redos 1
github 1
rocky 1
hp 1
ubuntucve
ubuntucve
CVE-2022-41946
2022-11-23 00:00:00
nessus
nessus
RHEL 8 : Red Hat Virtualization (RHSA-2023:0759)
2024-04-28 00:00:00
RHEL 9 : postgresql-jdbc (RHSA-2023:2378)
2023-05-12 00:00:00
RHEL 8 : Satellite 6.12.3 Async Security Update (Important) (RHSA-2023:1630)
2024-04-28 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0103-1)
2023-01-20 00:00:00
openSUSE: Security Advisory for postgresql (SUSE-SU-2023:0103-1)
2024-03-04 00:00:00
Debian: Security Advisory (DLA-3218-1)
2022-12-03 00:00:00
oraclelinux
oraclelinux
postgresql-jdbc security update
2023-05-24 00:00:00
postgresql-jdbc security update
2023-05-15 00:00:00
alpinelinux
alpinelinux
CVE-2022-41946
2022-11-23 20:15:10
atlassian
atlassian
Upgrade Postgres for CVE-2022-41946
2023-03-23 22:26:31
almalinux
almalinux
Moderate: postgresql-jdbc security update
2023-05-09 00:00:00
Moderate: postgresql-jdbc security update
2023-05-16 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: postgresql-jdbc-42.4.3-1.fc37
2023-01-13 01:32:00
redhat
redhat
(RHSA-2023:0759) Moderate: Red Hat Virtualization security and bug fix update
2023-02-14 13:05:12
(RHSA-2023:2378) Moderate: postgresql-jdbc security update
2023-05-09 05:08:53
(RHSA-2023:1630) Important: Satellite 6.12.3 Async Security Update
2023-04-04 15:11:57
debiancve
debiancve
CVE-2022-41946
2022-11-23 20:15:10
debian
debian
[SECURITY] [DLA 3218-1] libpgjava security update
2022-12-02 23:18:17
ibm
ibm
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in PostgreSQL
2023-01-30 17:36:51
Security Bulletin: IBM Connect:Direct Web Services vulnerable to sensitive information exposure due to PostgreSQL (CVE-2022-41946)
2023-01-06 03:15:07
Security Bulletin: Postgresql JDBC drivers shipped with IBM Security Verify Access have a vulnerability (CVE-2022-41946)
2023-10-14 05:12:39
cnvd
cnvd
PostgreSQL JDBC Drive Information Disclosure Vulnerability
2022-11-25 00:00:00
cvelist
cvelist
CVE-2022-41946 TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc
2022-11-23 00:00:00
CVE-2023-33251
2023-05-21 00:00:00
osv
osv
Moderate: postgresql-jdbc security update
2023-05-16 00:00:00
Moderate: postgresql-jdbc security update
2023-05-09 00:00:00
BIT-postgresql-jdbc-driver-2022-41946
2024-03-06 11:02:02
prion
prion
Information disclosure
2022-11-23 20:15:00
Design/Logic Flaw
2023-05-21 21:15:00
cve
cve
CVE-2022-41946
2022-11-23 20:15:10
CVE-2023-33251
2023-05-21 21:15:08
broadcom
broadcom
Vulnerable postgresql component found in SANnav RPM package
2023-08-29 00:00:00
nvd
nvd
CVE-2022-41946
2022-11-23 20:15:10
CVE-2023-33251
2023-05-21 21:15:08
redhatcve
redhatcve
CVE-2022-41946
2022-12-14 14:35:37
redos
redos
ROS-20240807-07
2024-08-07 00:00:00
github
github
TemporaryFolder on unix-like systems does not limit access to created files
2022-11-23 22:17:25
rocky
rocky
Satellite 6.13 Release
2023-05-05 15:39:58
hp
hp
HP Device Manager Vulnerability Update (5.0.12)
2024-01-26 00:00:00

EPSS

0.001

Percentile

23.5%

JSON
Related for VERACODE:38225
ubuntucve1nessus20openvas5oraclelinux2alpinelinux1atlassian1almalinux2fedora1redhat12debiancve1debian1ibm23cnvd1cvelist2osv7prion2cve2broadcom1nvd2redhatcve1redos1github1rocky1hp1