Improper initialization in Postgresql JDBC Driver - CVE-2022-21724

Vulnerability identifier: #VU62714

CSH Severity: Medium

CVSS v4 BT: 6.9 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21724

CWE-ID: CWE-665

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to improper initialization in pgjdbc driver when handling attacker-controlled URL in connection properties as the driver does not verify if the class implements the expected interface before instantiating the class. A remote attacker can pass specially crafted URL to the affected application and execute arbitrary code in the system.

Postgresql JDBC Driver
IBM i Modernization Engine for Lifecycle Integration
IBM Business Automation Manager Open Editions
InfoSphere Data Replication
PaperCut NG
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Dell Secure Connect Gateway
IBM Tivoli Netcool Impact
Bitbucket Data Center
IBM Security Verify Governance
Netcool Operations Insight
Red Hat Integration - Service Registry
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
SUSE Linux Enterprise Module for SUSE Manager Server
openEuler
Fedora
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Bitbucket Server
prometheus-formula
golang-github-QubitProducts-exporter_exporter
golang-github-lusitaniae-apache_exporter
golang-github-lusitaniae-apache_exporter-debuginfo
prometheus-exporters-formula
subscription-matcher
golang-github-prometheus-node_exporter
spacewalk-setup
release-notes-susemanager-proxy
release-notes-susemanager
spacecmd
spacewalk-utils-extras
spacewalk-utils
susemanager-schema
spacewalk-backend-iss
spacewalk-backend-config-files
spacewalk-backend-config-files-common
spacewalk-backend-applet
spacewalk-backend-config-files-tool
spacewalk-backend-app
spacewalk-backend
spacewalk-backend-xmlrpc
spacewalk-backend-xml-export-libs
spacewalk-backend-tools
spacewalk-backend-sql-postgresql
spacewalk-backend-sql
spacewalk-backend-server
spacewalk-backend-package-push-server
spacewalk-backend-iss-export
spacewalk-base-minimal-config
susemanager-web-libs
spacewalk-html
spacewalk-base-minimal
spacewalk-base
susemanager-tools
susemanager
uyuni-config-modules
susemanager-sls
spacewalk-taskomatic
spacewalk-java-postgresql
spacewalk-java-lib
spacewalk-java-config
spacewalk-java
patterns-suma_server
patterns-suma_retail
susemanager-docs_en
susemanager-docs_en-pdf
susemanager-doc-indexes
libpgjava (Debian package)
postgresql-jdbc
postgresql-jdbc-javadoc
postgresql-jdbc-help
py27-compat-salt
IBM Disconnected Log Collector
Cloud Pak for Security (CP4S)
IBM Qradar SIEM

Install updates from vendor's website.

Postgresql JDBC Driver - addressed in versions 42.2.25, 42.3.2
IBM i Modernization Engine for Lifecycle Integration - update to 1.0.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.0.8
Dell Secure Connect Gateway - update to 5.14.00.10
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.1
IBM Tivoli Netcool Impact - update to 7.1.0.25
Bitbucket Server - addressed in versions 8.9.25, 8.19.15, 9.4.3, 9.5.1
Bitbucket Data Center - addressed in versions 8.9.25, 8.19.15, 9.4.3, 9.5.1
IBM Business Automation Manager Open Editions - update to 8.0.1
IBM Security Verify Governance - update to 10.0.1.0.3
PaperCut NG - update to 22.1.3
prometheus-formula - update to 0.3.7-150200.3.21.2
golang-github-QubitProducts-exporter_exporter - update to 0.4.0-150200.6.12.2
golang-github-lusitaniae-apache_exporter - update to 0.7.0-150200.2.6.2
golang-github-lusitaniae-apache_exporter-debuginfo - update to 0.7.0-150200.2.6.2
prometheus-exporters-formula - update to 0.9.5-150200.3.31.2
subscription-matcher - update to 0.28-150200.3.15.2
golang-github-prometheus-node_exporter - update to 1.3.0-150200.3.9.3
Netcool Operations Insight - update to 1.6.8
IBM Disconnected Log Collector - update to 1.8.3
Cloud Pak for Security (CP4S) - update to 1.10.10.0
Red Hat Integration - Service Registry - update to 2.3.0
spacewalk-setup - update to 4.1.11-150200.3.18.2
release-notes-susemanager-proxy - update to 4.1.15-150200.3.56.1
release-notes-susemanager - update to 4.1.15-150200.3.80.1
spacecmd - update to 4.1.18-150200.4.39.3
spacewalk-utils-extras - update to 4.1.20-150200.3.30.2
spacewalk-utils - update to 4.1.20-150200.3.30.2
susemanager-schema - update to 4.1.26-150200.3.45.4
spacewalk-backend-iss - update to 4.1.31-150200.4.50.4
spacewalk-backend-config-files - update to 4.1.31-150200.4.50.4
spacewalk-backend-config-files-common - update to 4.1.31-150200.4.50.4
spacewalk-backend-applet - update to 4.1.31-150200.4.50.4
spacewalk-backend-config-files-tool - update to 4.1.31-150200.4.50.4
spacewalk-backend-app - update to 4.1.31-150200.4.50.4
spacewalk-backend - update to 4.1.31-150200.4.50.4
spacewalk-backend-xmlrpc - update to 4.1.31-150200.4.50.4
spacewalk-backend-xml-export-libs - update to 4.1.31-150200.4.50.4
spacewalk-backend-tools - update to 4.1.31-150200.4.50.4
spacewalk-backend-sql-postgresql - update to 4.1.31-150200.4.50.4
spacewalk-backend-sql - update to 4.1.31-150200.4.50.4
spacewalk-backend-server - update to 4.1.31-150200.4.50.4
spacewalk-backend-package-push-server - update to 4.1.31-150200.4.50.4
spacewalk-backend-iss-export - update to 4.1.31-150200.4.50.4
spacewalk-base-minimal-config - update to 4.1.34-150200.3.47.6
susemanager-web-libs - update to 4.1.34-150200.3.47.6
spacewalk-html - update to 4.1.34-150200.3.47.6
spacewalk-base-minimal - update to 4.1.34-150200.3.47.6
spacewalk-base - update to 4.1.34-150200.3.47.6
susemanager-tools - update to 4.1.36-150200.3.52.1
susemanager - update to 4.1.36-150200.3.52.1
uyuni-config-modules - update to 4.1.36-150200.3.64.2
susemanager-sls - update to 4.1.36-150200.3.64.2
spacewalk-taskomatic - update to 4.1.46-150200.3.71.5
spacewalk-java-postgresql - update to 4.1.46-150200.3.71.5
spacewalk-java-lib - update to 4.1.46-150200.3.71.5
spacewalk-java-config - update to 4.1.46-150200.3.71.5
spacewalk-java - update to 4.1.46-150200.3.71.5
patterns-suma_server - update to 4.1-150200.6.12.2
patterns-suma_retail - update to 4.1-150200.6.12.2
susemanager-docs_en - update to 4.1-150200.11.55.2
susemanager-docs_en-pdf - update to 4.1-150200.11.55.2
susemanager-doc-indexes - update to 4.1-150200.11.55.4
IBM Qradar SIEM - addressed in versions 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5
libpgjava (Debian package) - addressed in versions 42.2.5-2+deb10u1, 42.2.15-1+deb11u1
postgresql-jdbc - update to 42.2.10-150200.3.8.2
postgresql-jdbc - update to 42.2.25-1
postgresql-jdbc-javadoc - update to 42.2.25-1
postgresql-jdbc-help - update to 42.2.25-1
postgresql-jdbc - update to 42.2.25-1.fc35
py27-compat-salt - update to 3000.3-150200.6.24.2

• https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4
• https://github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813
• https://security.netapp.com/advisory/ntap-20220311-0005/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS/

• Improper initialization in PostgreSQL JDBC driver
• SUSE update for Recommended update for SUSE Manager 4.1.15 Release Notes
• SUSE update for SUSE Manager Server 4.1
• Multiple vulnerabilities in IBM i Modernization Engine for Lifecycle Integration
• Debian update for libpgjava
• Multiple vulnerabilities in IBM Tivoli Netcool Impact
• Multiple vulnerabilities in Red Hat Process Automation Manager
• Multiple vulnerabilities in Red Hat Integration - Service registry
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in Dell Secure Connect Gateway
• IBM Security Verify Governance update for PostgreSQL
• IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data update for PostgreSQL JDBC Driver (PgJDBC)
• Multiple vulnerabilities in IBM Cloud Pak for Security (CP4S)
• Multiple vulnerabilities in PaperCut NG
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM InfoSphere Data Replication
• Multiple vulnerabilities in IBM Netcool Operations Insight
• Multiple vulnerabilities in IBM Disconnected Log Collector
• openEuler update for postgresql-jdbc
• Fedora 35 update for postgresql-jdbc
• Bitbucket Data Center and Server update for postgresql