Non notée
CVE-2017-7547 PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing…
Description
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| postgresql | Versions non publiées |
Références
- RHSA-2017:2728 access.redhat.com
- DSA-3936 www.debian.org
- RHSA-2017:2678 access.redhat.com
- DSA-3935 www.debian.org
- 1039142 www.securitytracker.com
- www.postgresql.org www.postgresql.org
- GLSA-201710-06 security.gentoo.org
- 100275 www.securityfocus.com
- RHSA-2017:2677 access.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de postgresql
Les 11 CVE de postgresql →
CVE-2024-10979
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change…
8.8
Élevée
CVE-2024-7348
Time-of-check Time-of-use (TOCTOU) race condition in pg_dump in PostgreSQL allows an object creator to execute arbitrary…
8.8
Élevée
CVE-2024-24213
Supabase PostgreSQL v15.1 was discovered to contain a SQL injection vulnerability via the component…
9.8
Critique
CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via bundled OpenSSL…
7.8
Élevée