Description

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.

Remediation

References

CVE-2017-7486

Related Vulnerabilities

osCommerce Incorrect Comparison Vulnerability (CVE-2020-23360)

MySQL CVE-2022-21330 Vulnerability (CVE-2022-21330)

PHP Resource Management Errors Vulnerability (CVE-2007-4660)

MySQL CVE-2022-21638 Vulnerability (CVE-2022-21638)

WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.19)

Severity

High

Classification

CVE-2017-7486 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities