Unencrypted Byte Injection in Odyssey with PostgreSQL

CVE-2021-43767

Summary

The Odyssey server application is susceptible to a vulnerability where it may inadvertently relay unencrypted bytes from a man-in-the-middle attacker to the client when it is set up to use PostgreSQL with 'trust' authentication or 'cert' authentication. This situation allows attackers to inject erroneous responses to the initial queries sent by the client, effectively masquerading these responses as legitimate server replies. This flaw undermines the expected SSL certificate verification, potentially exposing sensitive data to unauthorized entities.

References