PT-2010-5069
CVE-2010-3781
·
تاريخ النشر
2010-10-06
·
تاريخ التحديث
2017-09-19
الوصف من
CVSS 2.0
6.0
متوسطةالمقاييسAV:N/AC:M/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
PostgreSQL PL/php add-on version 1.4 and earlier
Description
The issue allows remote authenticated users to gain privileges via crafted script code in a SECURITY DEFINER function. This is related to improper protection of script execution by a different SQL user identity within the same session.
Recommendations
For PL/php add-on version 1.4 and earlier, consider restricting the use of SECURITY DEFINER functions until a patch is available. As a temporary workaround, limit the execution of script code to the intended SQL user identity to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾