PT-2019-2346 · Enterprisedb · Postgresql

Noah Misch + 1 · Published 2019-05-09 · Updated 2022-01-01 · CVE-2019-10128

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions postgresql versions 11.x prior to 11.3

Description A vulnerability was found in the Windows installer for EnterpriseDB-supplied PostgreSQL, which does not lock down the ACL of the binary installation directory or the ACL of the data directory, keeping the inherited ACL. This allows a local attacker to read arbitrary data directory files, essentially bypassing database-imposed read access limitations. In non-default configurations, an attacker with both an unprivileged Windows account and an unprivileged PostgreSQL account can cause the PostgreSQL service account to execute arbitrary code.

Recommendations For postgresql versions 11.x prior to 11.3, consider updating to version 11.3 or later to resolve the issue. As a temporary workaround, restrict access to the data directory and binary installation directory to minimize the risk of exploitation. Additionally, review and adjust the ACL settings for these directories to ensure proper access control.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2019-02121

CVE-2019-10128

Affected Products

Postgresql

References · 9

• 🔥 https://postgresql.org/about/news/1939 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-10128 · Security Note
• https://osv.dev/vulnerability/CVE-2019-10128 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02121 · Security Note
• https://t.me/cibsecurity/25202 · Telegram Post
• https://access.redhat.com/security/cve/cve-2019-10128 · Note
• https://postgresql.org/support/security · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1707102 · Note
• https://security.netapp.com/advisory/ntap-20210430-0004 · Note