CVE-2017-7547

Published: Aug 16, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

Affected (65)

Products: Postgresql: Postgresql

Postgresql

1 product

Postgresql

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.2.10
Postgresql Postgresql	Version 9.2.11
Postgresql Postgresql	Version 9.2.12
Postgresql Postgresql	Version 9.2.13
Postgresql Postgresql	Version 9.2.14
Postgresql Postgresql	Version 9.2.15
Postgresql Postgresql	Version 9.2.16
Postgresql Postgresql	Version 9.2.17
Postgresql Postgresql	Version 9.2.18
Postgresql Postgresql	Version 9.2.19
Postgresql Postgresql	Version 9.2.1
Postgresql Postgresql	Version 9.2.20
Postgresql Postgresql	Version 9.2.21
Postgresql Postgresql	Version 9.2.2
Postgresql Postgresql	Version 9.2.3
Postgresql Postgresql	Version 9.2.4
Postgresql Postgresql	Version 9.2.5
Postgresql Postgresql	Version 9.2.6
Postgresql Postgresql	Version 9.2.7
Postgresql Postgresql	Version 9.2.8
Postgresql Postgresql	Version 9.2.9
Postgresql Postgresql	Version 9.2

Configuration B

18 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.3.10
Postgresql Postgresql	Version 9.3.11
Postgresql Postgresql	Version 9.3.12
Postgresql Postgresql	Version 9.3.13
Postgresql Postgresql	Version 9.3.14
Postgresql Postgresql	Version 9.3.15
Postgresql Postgresql	Version 9.3.16
Postgresql Postgresql	Version 9.3.17
Postgresql Postgresql	Version 9.3.1
Postgresql Postgresql	Version 9.3.2
Postgresql Postgresql	Version 9.3.3
Postgresql Postgresql	Version 9.3.4
Postgresql Postgresql	Version 9.3.5
Postgresql Postgresql	Version 9.3.6
Postgresql Postgresql	Version 9.3.7
Postgresql Postgresql	Version 9.3.8
Postgresql Postgresql	Version 9.3.9
Postgresql Postgresql	Version 9.3

Configuration C

13 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.4.10
Postgresql Postgresql	Version 9.4.11
Postgresql Postgresql	Version 9.4.12
Postgresql Postgresql	Version 9.4.1
Postgresql Postgresql	Version 9.4.2
Postgresql Postgresql	Version 9.4.3
Postgresql Postgresql	Version 9.4.4
Postgresql Postgresql	Version 9.4.5
Postgresql Postgresql	Version 9.4.6
Postgresql Postgresql	Version 9.4.7
Postgresql Postgresql	Version 9.4.8
Postgresql Postgresql	Version 9.4.9
Postgresql Postgresql	Version 9.4

Configuration D

8 vulnerable

Vulnerable Software	Affected Versions
Postgresql Postgresql	Version 9.5.1.
Postgresql Postgresql	Version 9.5.2
Postgresql Postgresql	Version 9.5.3
Postgresql Postgresql	Version 9.5.4
Postgresql Postgresql	Version 9.5.5
Postgresql Postgresql	Version 9.5.6
Postgresql Postgresql	Version 9.5.7
Postgresql Postgresql	Version 9.5