CVE-2020-1720
postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 13, 2020
Updated · August 5, 2026
Description
A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.1CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CWE-285 · Improper Authorization