Description

PostgreSQL before 9.1.20, 9.2.x before 9.2.15, 9.3.x before 9.3.11, 9.4.x before 9.4.6, and 9.5.x before 9.5.1 does not properly restrict access to unspecified custom configuration settings (GUCS) for PL/Java, which allows attackers to gain privileges via unspecified vectors.

Remediation

References

CVE-2016-0766

Related Vulnerabilities

WordPress CVE-2020-28039 Vulnerability (CVE-2020-28039)

ownCloud Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-3833)

WordPress Plugin Form Maker by 10Web-Mobile-Friendly Drag & Drop Contact Form Builder Cross-Site Scripting (1.11.1)

Oracle Application Server CVE-2008-7235 Vulnerability (CVE-2008-7235)

WordPress CVE-2020-28033 Vulnerability (CVE-2020-28033)

Severity

High

Classification

CVE-2016-0766 CWE-264 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities