Vendor
DALIBO
24 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
Low 3.5
PostgreSQL Anonymizer: Masked roles can read the statistics of masked columns in pg_stats
PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table. A masked role can therefore read a limited subset of the data through the statistics view's histograms and mcvs. The vulnerability is resolved in Post…
-
Low 3.5
PostgreSQL Anonymizer: Data-modifying CTEs bypass the read-only restriction of masked roles
PostgreSQL Anonymizer contains a vulnerability that data-modifying CTEs to bypass the read-only restriction of masked roles. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions