DB: PostgreSQL Database SET ROLE Security Bypass

A policy bypass vulnerability has been found in PostgreSQL database server. The vulnerability is due to a design weakness when granting a role without ADMIN OPTION. A remote attacker can exploit the vulnerability to cause a policy bypass allowing execution of a security-restricted operation or a SECURITY DEFINER function.

Extended Description

PostgreSQL before 8.4.20, 9.0.x before 9.0.16, 9.1.x before 9.1.12, 9.2.x before 9.2.7, and 9.3.x before 9.3.3 does not properly enforce the ADMIN OPTION restriction, which allows remote authenticated members of a role to add or remove arbitrary users to that role by calling the SET ROLE command before the associated GRANT command.

Affected Products

Postgresql postgresql

References

CVE: CVE-2014-0060

Short Name

DB:POSTGRESQL:SET-ROLE-BYPASS

Severity

Major

Recommended

True

Recommended Action

None

DB: PostgreSQL Database SET ROLE Security Bypass

Extended Description

Affected Products

References

Found a potential security threat?