ID de Prueba:	1.3.6.1.4.1.25623.1.0.812312
Categoría:	Databases
Título:	PostgreSQL Security Bypass Vulnerability (Dec 2017) - Linux
Resumen:	PostgreSQL is prone to a security bypass vulnerability.
Descripción:	Summary: PostgreSQL is prone to a security bypass vulnerability. Vulnerability Insight: The flaw exists as commands 'INSERT .. ON CONFLICT DO UPDATE' disclose table contents that the invoker lacks privilege to read. Vulnerability Impact: Successful exploitation will allow remote authenticated users to bypass access controls on the target system. Affected Software/OS: PostgreSQL version 9.5.x before 9.5.10, 9.6.x before 9.6.6 and 10.x before 10.1. Solution: Upgrade to PostgreSQL version 10.1 or 9.6.6 or 9.5.10 or later. CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-15099 BugTraq ID: 101781 http://www.securityfocus.com/bid/101781 Debian Security Information: DSA-4028 (Google Search) https://www.debian.org/security/2017/dsa-4028 https://www.postgresql.org/support/security/ RedHat Security Advisories: RHSA-2018:2511 https://access.redhat.com/errata/RHSA-2018:2511 RedHat Security Advisories: RHSA-2018:2566 https://access.redhat.com/errata/RHSA-2018:2566 http://www.securitytracker.com/id/1039752
Copyright	Copyright (C) 2017 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.