PostgreSQL 需授权 权限管理不当漏洞 可导致远程代码执行

漏洞描述

PoC代码

暂无

相关漏洞推荐

• POC CVE-2019-9193: PostgreSQL 9.3-12.3 Authenticated Remote Code Execution
• POC log-connections-disabled: PostgreSQL "log_connections" Parameter - Disabled
• POC log-disconnections-disabled: PostgreSQL "log_disconnections" Parameter - Disabled
• POC log-duration-disabled: PostgreSQL "log_duration" Parameter - Disabled
• POC postgresql-audit-disabled: PostgreSQL Database Instances - SQL Auditing Disabled
• POC ec2-unrestricted-pgsql: Unrestricted PostgreSQL Access
• POC azure-postgresql-db-delete-unalerted: Azure PostgreSQL Database Delete Alert Not Configured
• POC azure-postgresql-db-update-unalerted: Azure PostgreSQL Database Create/Update Alert Not Configured
• POC azure-nsg-postgresql-unrestricted: Unrestricted PostgreSQL Database Access in Azure NSGs
• POC azure-postgres-allow-azure-services-disabled: Azure PostgreSQL Access From Azure Services Disabled
• POC azure-postgres-connection-throttling-disabled: Azure PostgreSQL Server Connection Throttling Disabled
• POC azure-postgres-log-checkpoints-disabled: Azure PostgreSQL Flexible Server log_checkpoints Disabled
• POC azure-postgres-log-connections-disabled: Azure PostgreSQL Log Connections Not Enabled