UpHeron
All vulnerabilities

Servers and applications

CVE-2017-7547

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated attackers to retrieve passwords from the user mappings defined by the foreign server owners without actually having the privileges to do so.

Severity
High 8.8
Published
16 Aug 2017
Last changed
17 Jun 2026
Added to UpHeron
16 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PostgreSQLServers and applications · cpe:a:postgresql:postgresql
  • Version 9.6.3
  • Version 9.6.2
  • Version 9.6.1
  • Version 9.6
All 65 release lines
  • Version 9.2
  • Version 9.2.1
  • Version 9.2.2
  • Version 9.2.3
  • Version 9.2.4
  • Version 9.2.5
  • Version 9.2.6
  • Version 9.2.7
  • Version 9.2.8
  • Version 9.2.9
  • Version 9.2.10
  • Version 9.2.11
  • Version 9.2.12
  • Version 9.2.13
  • Version 9.2.14
  • Version 9.2.15
  • Version 9.2.16
  • Version 9.2.17
  • Version 9.2.18
  • Version 9.2.19
  • Version 9.2.20
  • Version 9.2.21
  • Version 9.3
  • Version 9.3.1
  • Version 9.3.2
  • Version 9.3.3
  • Version 9.3.4
  • Version 9.3.5
  • Version 9.3.6
  • Version 9.3.7
  • Version 9.3.8
  • Version 9.3.9
  • Version 9.3.10
  • Version 9.3.11
  • Version 9.3.12
  • Version 9.3.13
  • Version 9.3.14
  • Version 9.3.15
  • Version 9.3.16
  • Version 9.3.17
  • Version 9.4
  • Version 9.4.1
  • Version 9.4.2
  • Version 9.4.3
  • Version 9.4.4
  • Version 9.4.5
  • Version 9.4.6
  • Version 9.4.7
  • Version 9.4.8
  • Version 9.4.9
  • Version 9.4.10
  • Version 9.4.11
  • Version 9.4.12
  • Version 9.5
  • Version 9.5.1.
  • Version 9.5.2
  • Version 9.5.3
  • Version 9.5.4
  • Version 9.5.5
  • Version 9.5.6
  • Version 9.5.7
  • Version 9.6
  • Version 9.6.1
  • Version 9.6.2
  • Version 9.6.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-7547
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-7547