Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: The PostgreSQL Global Development Group PostgreSQL — RHSA-2017:1983 Clear all filters
TI-2017-05132 CVE-2017-7486 · GHSA-cxxw-q5xv-pww9

Insufficiently protected credentials in PostgreSQL

Priority MEDIUM 42

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.06331 Published 2017-05-12 Partial fix CWE-522
TI-2017-05130 CVE-2017-7484 · GHSA-pwf5-pc7m-6hp4

Improper authorization in PostgreSQL

Priority LOW 38

It was found that some selectivity estimation functions in PostgreSQL before 9.2.21, 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7, and 9.6.x before 9.6.3 did not check user privileges before providing inf…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0256 Published 2017-05-12 Partial fix CWE-285