QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-7546

Back to search

CVE-2017-7546

Published: Aug 16, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

VendorProductVersions

PostgreSQL

postgresql

affected
9.2.x before 9.2.22
affected
9.3.x before 9.3.18
affected
9.4.x before 9.4.13
affected
9.5.x before 9.5.8
affected
9.6.x before 9.6.4

Weaknesses (CWE)

CWE-287

References

RHSA-2017:2728
vendor-advisory
x_refsource_REDHAT
DSA-3936
vendor-advisory
x_refsource_DEBIAN
RHSA-2017:2678
vendor-advisory
x_refsource_REDHAT
RHSA-2017:2860
vendor-advisory
x_refsource_REDHAT
100278
vdb-entry
x_refsource_BID
DSA-3935
vendor-advisory
x_refsource_DEBIAN
1039142
vdb-entry
x_refsource_SECTRACK
GLSA-201710-06
vendor-advisory
x_refsource_GENTOO
RHSA-2017:2677
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now