VULNERABILITY INTELLIGENCE

CVE-2017-7547

CVSS score8.8 HIGH
EPSS probability5.58%
CISA KEVNot currently listed
Published2017-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references