CVE-2021-23222.json

{
    "CVE-ID": "CVE-2021-23222",
    "NVD": {
        "Descriptions": "A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.",
        "Cvss2_BaseScore": 4.3,
        "Cvss3_BaseScore": 5.9,
        "Cvss2_VectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N",
        "Cvss3_VectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
        "CPEs": [
            {
                "URI": "cpe:/a:postgresql:postgresql:14.0",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:14.0:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "9.6",
                "VersionEndExcluding": "9.6.24",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "10.0",
                "VersionEndExcluding": "10.19",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "11.0",
                "VersionEndExcluding": "11.14",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "12.0",
                "VersionEndExcluding": "12.9",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "13.0",
                "VersionEndExcluding": "13.5",
                "VersionEndIncluding": ""
            }
        ]
    },
    "Official": {
        "9.6.24": {
            "source": [
                "https://www.postgresql.org/support/security/9.6/",
                "https://www.postgresql.org/docs/release/9.6.24/"
            ]
        },
        "10.19": {
            "source": [
                "https://www.postgresql.org/support/security/10/",
                "https://www.postgresql.org/docs/release/10.19/"
            ]
        },
        "11.14": {
            "source": [
                "https://www.postgresql.org/support/security/11/",
                "https://www.postgresql.org/docs/release/11.14/"
            ]
        },
        "12.9": {
            "source": [
                "https://www.postgresql.org/support/security/12/",
                "https://www.postgresql.org/docs/release/12.9/"
            ]
        },
        "13.5": {
            "source": [
                "https://www.postgresql.org/support/security/13/",
                "https://www.postgresql.org/docs/release/13.5/"
            ]
        },
        "14.1": {
            "source": [
                "https://www.postgresql.org/support/security/14/",
                "https://www.postgresql.org/docs/release/14.1/"
            ]
        }
    }
}