← Back

CVE-2026-105616

nvd nist
Published: Oct 28, 2026Modified: Nov 10, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`. But they are visible in `pg_db_role_setting` or `pg_roles` if they were set on the database, user or both. PostgreSQL Anonymizer's documentation recommends to use ALTER DATABASE / ALTER ROLE for the salt. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.

Affected (1)

1 product
Postgresql Anonymizer
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
version ≤ 3.3.0

References (1)

Source: f86ef6dc-4d3a-42ad-8f28-e6d5547a5007
Broken Link

Timeline

No history available yet.