CVE-2017-7546CWE-287

CVE-2017-7546: vulnerability in postgresql

Published · Updated

Follow this CVE+ Monitor PostgreSQL+ Monitor postgresql15

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

15Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 62%
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
2 products (3 components)
Red Hat Enterprise Linux 5 · Red Hat Satellite 5
no_fix_planned: Will not fix
Fixed
20 products (422 components)
Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 6) · Red Hat Software Collections for Red Hat Enterprise Linux Server (v. 7) · Red Hat Software Collections for Red Hat Enterprise Linux Server EUS (v. 6.7) · and others 15
fix ↗
Not affected
1 product (2 components) — because the vulnerable code is not present in the product
CloudForms Management Engine 5
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.
Affected products
PostgreSQL · postgresql
Related CVEs — postgresql

In the same product, most dangerous first.

CVE-2017-7547—CVE-2017-7547EPSS 5.6%CVE-2017-7548—CVE-2017-7548EPSS 3.5%CVE-2019-10208HIGHCVE-2019-10208EPSS 2.2%CVE-2019-10211HIGHCVE-2019-10211EPSS 1.8%CVE-2019-10209LOWCVE-2019-10209EPSS 1.1%CVE-2019-10210MEDIUMCVE-2019-10210EPSS 0.4%