CVE-2021-20229: Medium severity PostgreSQL postgresql vulnerability
A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality.
Other sources
A user having SELECT privilege on one column can craft a special query that returns all columns of the table.
The PostgreSQL project thanks Sven Klemm for reporting this problem.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-20229?
CVE-2021-20229 is a vulnerability found in PostgreSQL versions before 13.2 that allows a user with SELECT privilege on one column to craft a special query to retrieve all columns of the table, posing a confidentiality risk.
What is the severity of CVE-2021-20229?
The severity of CVE-2021-20229 is medium, with a severity score of 4.3.
How does CVE-2021-20229 affect PostgreSQL?
CVE-2021-20229 affects PostgreSQL versions before 13.2, allowing a user with SELECT privilege on one column to retrieve all columns of the table, compromising confidentiality.
What software versions are affected by CVE-2021-20229?
PostgreSQL versions before 13.2 are affected by CVE-2021-20229.
How can I mitigate the risk of CVE-2021-20229?
To mitigate the risk of CVE-2021-20229, update PostgreSQL to version 13.2 or apply the necessary patches provided by the vendor.