NetSight
IP …
critical9.8

CVE-2017-7546

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to …

Impact

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

Affected products

VendorProductAffected versions
PostgresqlPostgresql
Versions 9.2, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.2.5
DebianDebian Linux
Version 9.0

Weakness classification

CWE-287

References