CVE-2016-2193

CVE-2016-2193 affects PostgreSQL prior to 9.5.2 where row-security status was not correctly maintained in cached plans, potentially allowing a session running queries as multiple roles to bypass intended access restrictions. The provided sources indicate the issue lies in how row-level security i...

KLA10790 Multiple vulnerabilities in PostgreSQL

Multiple serious vulnerabilities have been found in PostgreSQL. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information or cause denial of service. Below is a complete list of vulnerabilities 1. An unknown vulnerability can be exploited via ...

PT-2016-1648 · Postgresql · Postgresql

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 9.5.2 Description: The issue is related to errors in security settings, allowing a remote attacker to bypass existing access restrictions by leveraging a session that performs queries as more than one role. This i...