CVE-2017-7547 | BDVDB-2026-89182 Detail
PostgreSQLpostgresql
Description#
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Impact#
No impact statement in the source data.
Weaknesses#
- CWE-522 Insufficiently Protected Credentials
References#
- https://access.redhat.com/errata/RHSA-2017:2728
- http://www.debian.org/security/2017/dsa-3936
- https://access.redhat.com/errata/RHSA-2017:2678
- http://www.debian.org/security/2017/dsa-3935
- http://www.securitytracker.com/id/1039142
- https://www.postgresql.org/about/news/1772/
- https://security.gentoo.org/glsa/201710-06
- http://www.securityfocus.com/bid/100275
- https://access.redhat.com/errata/RHSA-2017:2677
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.