CVE-2014-8161

· MEDIUMModified

← All CVEs

CVSS v3.1

4.3

EPSS

2.51%

Published

Jan 27, 2020

Modified

Nov 20, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 allows remote authenticated users to obtain sensitive column values by triggering constraint violation and then reading the error message.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weaknesses (CWE)

CWE-209

Affected Products (7)

postgresql · postgresql (up to 9.0.19)vulnerable

postgresql · postgresql (up to 9.1.15)vulnerable

postgresql · postgresql (up to 9.2.10)vulnerable

postgresql · postgresql (up to 9.3.6)vulnerable

postgresql · postgresql (up to 9.4.1)vulnerable

debian · debian_linuxvulnerable

References (14)

http://www.debian.org/security/2015/dsa-3155

Third Party Advisory

http://www.postgresql.org/about/news/1569/

Vendor Advisory

http://www.postgresql.org/docs/9.4/static/release-9-4-1.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-0-19.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-1-15.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-2-10.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-3-6.html

Release NotesVendor Advisory

http://www.debian.org/security/2015/dsa-3155

Third Party Advisory

http://www.postgresql.org/about/news/1569/

Vendor Advisory

http://www.postgresql.org/docs/9.4/static/release-9-4-1.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-0-19.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-1-15.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-2-10.html

Release NotesVendor Advisory

http://www.postgresql.org/docs/current/static/release-9-3-6.html

Release NotesVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs