CVEvulnerability
CVE-2014-8161
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2020-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-209
Description
PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.
Affected configurations
• postgresql postgresql (< 9.0.19)
• postgresql postgresql (>= 9.1.0 < 9.1.15)
• postgresql postgresql (>= 9.2.0 < 9.2.10)
• postgresql postgresql (>= 9.3.0 < 9.3.6)
• postgresql postgresql (>= 9.4.0 < 9.4.1)
• debian debian linux 7.0
• debian debian linux 8.0
Related
Weakness · CWE (1)
- CWE-209 Generation of Error Message Containing Sensitive Information weakness
References
- http://www.debian.org/security/2015/dsa-3155 Third Party Advisory
- http://www.postgresql.org/about/news/1569/ Vendor Advisory
- http://www.postgresql.org/docs/9.4/static/release-9-4-1.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-0-19.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-1-15.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-2-10.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-3-6.html Release Notes, Vendor Advisory
- http://www.debian.org/security/2015/dsa-3155 Third Party Advisory
- http://www.postgresql.org/about/news/1569/ Vendor Advisory
- http://www.postgresql.org/docs/9.4/static/release-9-4-1.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-0-19.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-1-15.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-2-10.html Release Notes, Vendor Advisory
- http://www.postgresql.org/docs/current/static/release-9-3-6.html Release Notes, Vendor Advisory