Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2017-7486 - Vulnerability Database
PostgreSQL

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability - CVE-2017-7486

High
Reference: CVE-2017-7486
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-7486
Title: PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Overview:

PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.