VULNERABILITY INTELLIGENCE

CVE-2017-7546

CVSS score9.8 CRITICAL
EPSS probability61.57%
CISA KEVNot currently listed
Published2017-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

Weakness classification

  • CWE-287: Improper Authentication

Primary references