CVE - CVE-2021-23222

CVE-ID
CVE-2021-23222	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
GENTOO:GLSA-202211-04 URL:https://security.gentoo.org/glsa/202211-04 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=2022675 URL:https://bugzilla.redhat.com/show_bug.cgi?id=2022675 MISC:https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=d83cdfdca9d918bbbd6bb209139b94c954da7228 URL:https://git.postgresql.org/gitweb/?p=postgresql.git;a=commitdiff;h=d83cdfdca9d918bbbd6bb209139b94c954da7228 MISC:https://github.com/postgres/postgres/commit/160c0258802d10b0600d7671b1bbea55d8e17d45 URL:https://github.com/postgres/postgres/commit/160c0258802d10b0600d7671b1bbea55d8e17d45 MISC:https://www.postgresql.org/support/security/CVE-2021-23222/ URL:https://www.postgresql.org/support/security/CVE-2021-23222/
Assigning CNA
Red Hat, Inc.
Date Record Created
20211103	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20211103)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)