CVE-2017-7546

原文の説明

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

影響を受けるソフトウェア

• PostgreSQL = 9.4.12= 9.2.11= 9.5.6= 9.5.1= 9.2.3= 9.4.4 完全一致

詳細

公開日

2017-08-17

最終更新

2024-09-17

CVSS ベクター

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-287

参考資料

• cve.org/CVE-2017-7546
• nvd.nist.gov/vuln/detail/CVE-2017-7546
• access.redhat.com/errata/RHSA-2017:2728
• www.debian.org/security/2017/dsa-3936
• access.redhat.com/errata/RHSA-2017:2678
• access.redhat.com/errata/RHSA-2017:2860
• www.securityfocus.com/bid/100278
• www.debian.org/security/2017/dsa-3935
• www.securitytracker.com/id/1039142
• www.postgresql.org/about/news/1772/
• security.gentoo.org/glsa/201710-06
• access.redhat.com/errata/RHSA-2017:2677