CVE-2023-22847

Published: Mar 7, 2023Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Information disclosure vulnerability exists in pg_ivm versions prior to 1.5.1. An Incrementally Maintainable Materialized View (IMMV) created by pg_ivm may reflect rows with Row-Level Security that the owner of the IMMV should not have access to. As a result, information in tables protected by Row-Level Security may be retrieved by a user who is not authorized to access it.

Affected (1)

Products: Sraoss: Pg Ivm

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sraoss Pg Ivm	Before 1.5.1

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://github.com/sraoss/pg_ivm

Source: vultures@jpcert.or.jp

Product

https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1

Source: vultures@jpcert.or.jp

Release Notes

https://jvn.jp/en/jp/JVN19872280/

Source: vultures@jpcert.or.jp

Third Party Advisory

https://github.com/sraoss/pg_ivm

Source: af854a3a-2127-422b-91ae-364da2661108

Product

https://github.com/sraoss/pg_ivm/releases/tag/v1.5.1

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://jvn.jp/en/jp/JVN19872280/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.