111 lines
4.2 KiB
JSON
111 lines
4.2 KiB
JSON
{
|
|
"dataType": "CVE_RECORD",
|
|
"dataVersion": "5.2",
|
|
"cveMetadata": {
|
|
"cveId": "CVE-2026-116311",
|
|
"assignerOrgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
|
|
"state": "PUBLISHED",
|
|
"assignerShortName": "PostgreSQL",
|
|
"dateReserved": "2026-10-26T03:52:44.052Z",
|
|
"datePublished": "2026-11-12T14:15:06.390Z",
|
|
"dateUpdated": "2026-11-12T14:15:06.390Z"
|
|
},
|
|
"containers": {
|
|
"cna": {
|
|
"providerMetadata": {
|
|
"orgId": "f86ef6dc-4d3a-42ad-8f28-e6d5547a5007",
|
|
"shortName": "PostgreSQL",
|
|
"dateUpdated": "2026-11-12T14:15:06.390Z"
|
|
},
|
|
"title": "PostgreSQL DROP OWNED can remove restrictive row security policies from non-owned tables",
|
|
"x_postgresql": {
|
|
"component": "core server"
|
|
},
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Missing authorization in PostgreSQL DROP OWNED allows a role to remove itself from restrictive row level security policies, thereby reading or modifying rows that the policy was intended to deny, via queries after the DROP OWNED. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected."
|
|
}
|
|
],
|
|
"affected": [
|
|
{
|
|
"defaultStatus": "unaffected",
|
|
"product": "PostgreSQL",
|
|
"vendor": "n/a",
|
|
"versions": [
|
|
{
|
|
"lessThan": "18.7",
|
|
"status": "affected",
|
|
"version": "18",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "17.12",
|
|
"status": "affected",
|
|
"version": "17",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "16.16",
|
|
"status": "affected",
|
|
"version": "16",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "15.20",
|
|
"status": "affected",
|
|
"version": "15",
|
|
"versionType": "rpm"
|
|
},
|
|
{
|
|
"lessThan": "14.25",
|
|
"status": "affected",
|
|
"version": "0",
|
|
"versionType": "rpm"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"problemTypes": [
|
|
{
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"cweId": "CWE-862",
|
|
"type": "CWE",
|
|
"description": "Missing Authorization"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://www.postgresql.org/support/security/CVE-2026-116311/"
|
|
}
|
|
],
|
|
"metrics": [
|
|
{
|
|
"format": "CVSS",
|
|
"cvssV3_1": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
|
|
"baseScore": 5.4,
|
|
"baseSeverity": "MEDIUM"
|
|
}
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"lang": "en",
|
|
"value": "a restrictive row level security policy on a non-attacker-owned table applies to the attacker"
|
|
}
|
|
],
|
|
"credits": [
|
|
{
|
|
"lang": "en",
|
|
"value": "The PostgreSQL project thanks Zsolt Parragi and Anthropic OSS program for reporting this problem."
|
|
}
|
|
]
|
|
}
|
|
}
|
|
} |