Test ID:	1.3.6.1.4.1.25623.1.0.112428
Category:	Databases
Title:	PostgreSQL < 10.6, 11.x < 11.1 SQL Injection Vulnerability - Windows
Summary:	PostgreSQL is prone to an SQL injection vulnerability.
Description:	Summary: PostgreSQL is prone to an SQL injection vulnerability. Vulnerability Insight: A SQL Injection flaw has been discovered in PostgreSQL server in the way triggers that enable transition relations are dumped. The transition relation name is not correctly quoted and it may allow an attacker with CREATE privilege on some non-temporary schema or TRIGGER privilege on some table to create a malicious trigger that, when dumped and restored, would result in additional SQL statements being executed. Affected Software/OS: PostgreSQL before versions 10.6 and 11.1. Solution: Update to version 10.6 or 11.1 respectively. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16850 BugTraq ID: 105923 http://www.securityfocus.com/bid/105923 https://security.gentoo.org/glsa/201811-24 RedHat Security Advisories: RHSA-2018:3757 https://access.redhat.com/errata/RHSA-2018:3757 http://www.securitytracker.com/id/1042144 https://usn.ubuntu.com/3818-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.