CVE-2017-7486CWE-522

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE…

published May 12, 2017

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06331 · 93.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2017-05-12T19:00Z
EPSS history
Timeline
  • 12 MAY 19:00Z
    PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE…
    cvelistv5