Test Kennung:	1.3.6.1.4.1.25623.1.0.112429
Kategorie:	Databases
Titel:	PostgreSQL < 10.6, 11.x < 11.1 SQL Injection Vulnerability - Linux
Zusammenfassung:	PostgreSQL is prone to an SQL injection vulnerability.
Beschreibung:	Summary: PostgreSQL is prone to an SQL injection vulnerability. Vulnerability Insight: A SQL Injection flaw has been discovered in PostgreSQL server in the way triggers that enable transition relations are dumped. The transition relation name is not correctly quoted and it may allow an attacker with CREATE privilege on some non-temporary schema or TRIGGER privilege on some table to create a malicious trigger that, when dumped and restored, would result in additional SQL statements being executed. Affected Software/OS: PostgreSQL before versions 10.6 and 11.1. Solution: Update to version 10.6 or 11.1 respectively. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16850 BugTraq ID: 105923 http://www.securityfocus.com/bid/105923 https://security.gentoo.org/glsa/201811-24 RedHat Security Advisories: RHSA-2018:3757 https://access.redhat.com/errata/RHSA-2018:3757 http://www.securitytracker.com/id/1042144 https://usn.ubuntu.com/3818-1/
Copyright	Copyright (C) 2018 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.