Description

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.

Remediation

References

CVE-2016-0766

Related Vulnerabilities

WordPress Plugin ClickDesk Live Support-Live Chat-Help Desk 'cdwidgetid' Parameter Cross-Site Scripting (2.0)

WordPress Plugin Allopass for WP Cross-Site Scripting (1.0.7)

WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)

WordPress Plugin WR ContactForm SQL Injection (1.1.9)

Moodle Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9186)

Severity

High

Classification

CVE-2016-0766 CWE-264 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities