PT-2019-11636 · Postgresql Global Development Group · Postgresql

Noah Misch · Publicado 2019-05-08 · Atualizado 2022-11-07 · CVE-2019-10210

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Postgresql versions prior to 11.5 Postgresql versions prior to 10.10 Postgresql versions prior to 9.6.15 Postgresql versions prior to 9.5.19 Postgresql versions prior to 9.4.24

Description: The issue allows a superuser to write a password to an unprotected temporary file.

Recommendations: For versions prior to 11.5, update to version 11.5 or later. For versions prior to 10.10, update to version 10.10 or later. For versions prior to 9.6.15, update to version 9.6.15 or later. For versions prior to 9.5.19, update to version 9.5.19 or later. For versions prior to 9.4.24, update to version 9.4.24 or later.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2019-10210

Produtos afetados

Postgresql

Referências · 6

• https://postgresql.org/support/security/CVE-2019-10210 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10210 · Nota
• https://postgresql.org/about/news/1960 · Aviso do Fabricante
• https://pangolin.sbertech.ru/cve-policy?cve=CVE-2019-10210 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10210 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-10210 · Aviso do Fabricante