PT-2019-2346 · Enterprisedb · Postgresql

Noah Misch + 1 · Publicado 2019-05-09 · Atualizado 2022-01-01 · CVE-2019-10128

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions postgresql versions 11.x prior to 11.3

Description A vulnerability was found in the Windows installer for EnterpriseDB-supplied PostgreSQL, which does not lock down the ACL of the binary installation directory or the ACL of the data directory, keeping the inherited ACL. This allows a local attacker to read arbitrary data directory files, essentially bypassing database-imposed read access limitations. In non-default configurations, an attacker with both an unprivileged Windows account and an unprivileged PostgreSQL account can cause the PostgreSQL service account to execute arbitrary code.

Recommendations For postgresql versions 11.x prior to 11.3, consider updating to version 11.3 or later to resolve the issue. As a temporary workaround, restrict access to the data directory and binary installation directory to minimize the risk of exploitation. Additionally, review and adjust the ACL settings for these directories to ensure proper access control.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2019-02121

CVE-2019-10128

Produtos afetados

Postgresql

Referências · 9

• 🔥 https://postgresql.org/about/news/1939 · Exploit
• https://t.me/cibsecurity/25202 · Publicação no Telegram
• https://access.redhat.com/security/cve/cve-2019-10128 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10128 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-10128 · Aviso do Fabricante
• https://postgresql.org/support/security · Nota
• https://bdu.fstec.ru/vul/2019-02121 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1707102 · Nota
• https://security.netapp.com/advisory/ntap-20210430-0004 · Nota