CVE-2016-2193

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access…

published April 11, 2016

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01807 · 78.3th percentile
Published
2016-04-11T15:00Z
EPSS history
Timeline
  • 11 APR 15:00Z
    PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access…
    cvelistv5