CVE-2017-7547: High severity PostgreSQL postgresql vulnerability
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.
Other sources
The pgusermappings view long required privileges on a given foreign server in order to see "options", notably passwords, associated with user mappings of that server. The fix for CVE-2017-7486 removed that requirement. This allows each user to retrieve passwords from user mappings that foreign server owners defined for the user in question, even if that owner granted no actual privileges. The user in question might retrieve the password and use it to connect via another mechanism.
Supported vulnerable versions: 9.2 - 9.6
Upstream patch:
https://github.com/postgres/postgres/commit/b6e39ca92eeee4
Users affected by CVE-2017-7547 will need to perform additional steps after upgrading to resolve the issue. See https://www.postgresql.org/about/news/1772/ for more information on this.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7547?
CVE-2017-7547 is classified as a medium severity vulnerability.
How do I fix CVE-2017-7547?
To fix CVE-2017-7547, upgrade to PostgreSQL versions 9.2.22, 9.3.18, 9.4.13, 9.5.8, or 9.6.4 or later.
What types of PostgreSQL versions are affected by CVE-2017-7547?
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8, and 9.6.4 are affected by CVE-2017-7547.
Who can exploit CVE-2017-7547?
Remote authenticated attackers can exploit CVE-2017-7547 to retrieve passwords from user mappings.
What is the nature of the vulnerability in CVE-2017-7547?
CVE-2017-7547 is an authorization flaw that allows access to sensitive information without the necessary privileges.