35
CVE-2017-7486
—CVSS 3.0
7.5 high
EPSS
6%p93
Published
()
Modified
Description
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
- Vendors
- postgresql
- Products
- postgresql
- Weakness
- CWE-522, CWE-200
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N