← volver
CVE-2017-7547

CVE-2017-7547

EPSS 5.6%CWE-522
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Productos afectados
PostgreSQL · postgresql

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://access.redhat.com/errata/RHSA-2017:2677https://access.redhat.com/errata/RHSA-2017:2678https://access.redhat.com/errata/RHSA-2017:2728https://security.gentoo.org/glsa/201710-06https://www.postgresql.org/about/news/1772/http://www.debian.org/security/2017/dsa-3935http://www.debian.org/security/2017/dsa-3936http://www.securityfocus.com/bid/100275http://www.securitytracker.com/id/1039142