QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2017-7547

Back to search

CVE-2017-7547

Published: Aug 16, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

VendorProductVersions

PostgreSQL

postgresql

affected
9.2.x before 9.2.22
affected
9.3.x before 9.3.18
affected
9.4.x before 9.4.13
affected
9.5.x before 9.5.8
affected
9.6.x before 9.6.4

Weaknesses (CWE)

CWE-522

References

RHSA-2017:2728
vendor-advisory
x_refsource_REDHAT
DSA-3936
vendor-advisory
x_refsource_DEBIAN
RHSA-2017:2678
vendor-advisory
x_refsource_REDHAT
DSA-3935
vendor-advisory
x_refsource_DEBIAN
1039142
vdb-entry
x_refsource_SECTRACK
GLSA-201710-06
vendor-advisory
x_refsource_GENTOO
100275
vdb-entry
x_refsource_BID
RHSA-2017:2677
vendor-advisory
x_refsource_REDHAT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now