CVE-2023-22847
Medium
Description
Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by Row-Level Security may be retrieved by a user who is not authorized to access it.
SeverityMedium
CVSS4.3
Exploit probability—
ProductSraoss Pg Ivm
PublishedMar 7, 2023
First seenMar 7, 2023
Weakness typeCWE-200Sensitive information exposure
How to fix
Update
- sraoss pg_ivm1.5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sraoss pg_ivm | v < 1.5.1 | 1.5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.