CVE-2016-0766

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified…

published February 17, 2016

CVSS
—
EPSS
4%
Percentile
90.7
In the wild
Unconfirmed
What it is

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04111 · 90.7th percentile
Published
2016-02-17T15:00Z
EPSS history
Timeline
  • 17 FEB 15:00Z
    PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified…
    cvelistv5