CVE-2022-26520

 

Published at: - 10-03-2022 06:47

Last modified: - 01-08-2022 01:15

Total changes: - 4

Description

** DISPUTED ** In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection properties. An example situation is that an attacker could create an executable JSP file under a Tomcat web root. NOTE: the vendor's position is that there is no pgjdbc vulnerability; instead, it is a vulnerability for any application to use the pgjdbc driver with untrusted connection properties.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
• https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.3
• https://github.com/pgjdbc/pgjdbc/pull/2454/commits/017b929977b4f85795f9ad2fa5de6e80978b8ccc
• https://jdbc.postgresql.org/documentation/head/tomcat.html
• DSA-5196-

 

Keywords

NVD

 

CVE-2022-26520

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures