onyx --cves cve-2021-23214
CVE-2021-23214
- score
- <0.1
- cvss
- 8.1
- epss
- 1.9%
- published
- 2022-03-04
- kev added
- —
- first seen
The server configured with trust authentication or certificate authentication contains a man-in-the-middle caused by SQL injection vulnerability during connection establishment, letting attackers inject arbitrary SQL queries despite SSL verification, exploit requires MITM position.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 5
- https://www.postgresql.org/support/security/CVE-2021-23214/
- https://bugzilla.redhat.com/show_bug.cgi?id=2022666
- https://github.com/postgres/postgres/commit/28e24125541545483093819efae9bca603441951
- https://security.gentoo.org/glsa/202211-04
- https://git.postgresql.org/gitweb/?p=postgresql.git%3Ba=commit%3Bh=28e24125541545483093819efae9bca603441951