Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PostgreSQL Incorrect Permission Assignment for Critical Resource Vulnerability - CVE-2018-1115 - Vulnerability Database
PostgreSQL

PostgreSQL Incorrect Permission Assignment for Critical Resource Vulnerability - CVE-2018-1115

Critical
Reference: CVE-2018-1115
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-1115
Title: PostgreSQL Incorrect Permission Assignment for Critical Resource Vulnerability
Overview:

postgresql before versions 10.4 9.6.9 is vulnerable in the adminpack extension the pg_catalog.pg_logfile_rotate() function doesn39t follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database an attacker able to connect to it could exploit this to force log rotation.