CVE-2017-7547CWE-522

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve…

published August 16, 2017

CVSS
—
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05581 · 92.8th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2017-08-16T18:00Z
EPSS history
Timeline
  • 16 AUG 18:00Z
    PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve…
    cvelistv5