CVE-2017-7486
N/A
Published: May 12, 2017 at 07:00 PM UTC
Updated: June 17, 2026 at 01:24 AM UTC
2 products affected across 2 vendorsPostgreSQLPostgreSQL
Using PostgreSQL by The PostgreSQL Global Development Group?
Get instant alerts when new vulnerabilities affect PostgreSQL - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 6%
Description
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
8.48.4.18.4.108.4.118.4.128.4.138.4.148.4.158.4.168.4.178.4.188.4.198.4.28.4.208.4.218.4.228.4.38.4.48.4.58.4.68.4.78.4.88.4.99.09.0.19.0.109.0.119.0.129.0.139.0.149.0.159.0.169.0.179.0.189.0.199.0.29.0.209.0.219.0.229.0.239.0.39.0.49.0.59.0.69.0.79.0.89.0.99.19.1.19.1.109.1.119.1.129.1.139.1.149.1.159.1.169.1.179.1.189.1.199.1.29.1.209.1.219.1.229.1.239.1.249.1.39.1.49.1.59.1.69.1.79.1.89.1.99.29.2.19.2.109.2.119.2.129.2.139.2.149.2.159.2.169.2.179.2.189.2.199.2.29.2.209.2.219.2.39.2.49.2.59.2.69.2.79.2.89.2.99.39.3.19.3.109.3.119.3.129.3.139.3.149.3.159.3.169.3.179.3.29.3.39.3.49.3.59.3.69.3.79.3.89.3.99.49.4.19.4.109.4.119.4.129.4.29.4.39.4.49.4.59.4.69.4.79.4.89.4.99.59.5.19.5.29.5.39.5.49.5.59.5.69.5.79.6
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (10)
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2017/dsa-3851VDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/98460Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:1677Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:1678Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:1838Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:1983Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
https://access.redhat.com/errata/RHSA-2017:2425Quick Info
StatusMODIFIED
CWE
CWE-522CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card