CVE-2017-7546

Critical

Published: 16/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to an authentication flaw allowing remote attackers to gain access to database accounts with an empty password.

Risk Assessment

Attackers may gain unauthorized access to sensitive data in the database, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade PostgreSQL to the latest version to mitigate this vulnerability.

Original NVD description (English source)

PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allowing remote attackers to gain access to database accounts with an empty password.