PostgreSQL Anonymizer Dynamic Masking Bypass Vulnerability

A vulnerability in PostgreSQL Anonymizer versions 2.0 and 2.1 allows masked users to circumvent masking rules and access original data. This issue arises when dynamic masking is enabled, which is not the default. The vulnerability can be exploited using a database cursor or the '--inserts' option of pg_dump.

Impact

Exploitation of this vulnerability allows for unauthorized access to unmasked data, bypassing established data masking rules.

Reproduction

To reproduce this vulnerability, enable dynamic masking in PostgreSQL Anonymizer. Then, use the '--inserts' option with the pg_dump command. This will cause pg_dump to use a cursor-based approach, which bypasses the dynamic masking and allows the original data to be dumped without anonymization.

Remediation

Users can upgrade to PostgreSQL Anonymizer version 2.2.1, where this vulnerability has been fixed.