PT-2018-5763 · Red Hat+1 · Postgresql+2

CVE-2017-15097 · Publicado 2017-12-08 · Atualizado 2023-02-12

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: PostgreSQL (affected versions not specified)

Description: Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CESA-2017_3402

CVE-2017-15097

RHSA-2017:3402

RHSA-2017:3403

RHSA-2017:3404

RHSA-2017:3405

RHSA-2017_3402

Produtos afetados

Centos

Postgresql

Red Hat

Referências · 9

• https://access.redhat.com/errata/RHSA-2017:3403 · Aviso do Fabricante
• http://securitytracker.com/id/1039983 · Nota
• https://access.redhat.com/errata/RHSA-2017:3404 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15097 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15097 · Nota de Segurança
• https://access.redhat.com/errata/RHSA-2017:3405 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2017:3402 · Aviso do Fabricante
• https://t.me/cvenotify/43454 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2017-15097 · Aviso do Fabricante