CVEvulnerability

CVE-2017-7486

7.5 HIGH Published 2017-05-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-05-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200, CWE-522

Description

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

Affected configurations

• postgresql postgresql 8.4 • postgresql postgresql 8.4.1 • postgresql postgresql 8.4.2 • postgresql postgresql 8.4.3 • postgresql postgresql 8.4.4 • postgresql postgresql 8.4.5 • postgresql postgresql 8.4.6 • postgresql postgresql 8.4.7 • postgresql postgresql 8.4.8 • postgresql postgresql 8.4.9 • postgresql postgresql 8.4.10 • postgresql postgresql 8.4.11 • postgresql postgresql 8.4.12 • postgresql postgresql 8.4.13 • postgresql postgresql 8.4.14 • postgresql postgresql 8.4.15 • postgresql postgresql 8.4.16 • postgresql postgresql 8.4.17 • postgresql postgresql 8.4.18 • postgresql postgresql 8.4.19 • postgresql postgresql 8.4.20 • postgresql postgresql 8.4.21 • postgresql postgresql 8.4.22 • postgresql postgresql 9.0 • postgresql postgresql 9.0.1 • postgresql postgresql 9.0.2 • postgresql postgresql 9.0.3 • postgresql postgresql 9.0.4 • postgresql postgresql 9.0.5 • postgresql postgresql 9.0.6 • postgresql postgresql 9.0.7 • postgresql postgresql 9.0.8 • postgresql postgresql 9.0.9 • postgresql postgresql 9.0.10 • postgresql postgresql 9.0.11 • postgresql postgresql 9.0.12 • postgresql postgresql 9.0.13 • postgresql postgresql 9.0.14 • postgresql postgresql 9.0.15 • postgresql postgresql 9.0.16 • postgresql postgresql 9.0.17 • postgresql postgresql 9.0.18 • postgresql postgresql 9.0.19 • postgresql postgresql 9.0.20 • postgresql postgresql 9.0.21 • postgresql postgresql 9.0.22 • postgresql postgresql 9.0.23 • postgresql postgresql 9.1 • postgresql postgresql 9.1.1 • postgresql postgresql 9.1.2 • postgresql postgresql 9.1.3 • postgresql postgresql 9.1.4 • postgresql postgresql 9.1.5 • postgresql postgresql 9.1.6 • postgresql postgresql 9.1.7 • postgresql postgresql 9.1.8 • postgresql postgresql 9.1.9 • postgresql postgresql 9.1.10 • postgresql postgresql 9.1.11 • postgresql postgresql 9.1.12 … and 74 more

Related

Weakness · CWE (2)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-522 Insufficiently Protected Credentials weakness

References