Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2017-15099

INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits affect only tables where the attacker lacks full read access but has both INSERT and UPDATE privileges. Exploits bypass row level security policies and lack of SELECT privilege.

Published

2017-11-22T18:29:00.583

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 6.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-200
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application postgresql postgresql 9.5 Yes
Application postgresql postgresql 9.5.1 Yes
Application postgresql postgresql 9.5.2 Yes
Application postgresql postgresql 9.5.3 Yes
Application postgresql postgresql 9.5.4 Yes
Application postgresql postgresql 9.5.5 Yes
Application postgresql postgresql 9.5.6 Yes
Application postgresql postgresql 9.5.7 Yes
Application postgresql postgresql 9.5.8 Yes
Application postgresql postgresql 9.5.9 Yes
Application postgresql postgresql 9.6 Yes
Application postgresql postgresql 9.6.1 Yes
Application postgresql postgresql 9.6.2 Yes
Application postgresql postgresql 9.6.3 Yes
Application postgresql postgresql 9.6.4 Yes
Application postgresql postgresql 9.6.5 Yes
Application postgresql postgresql 10.0 Yes
Operating System debian debian_linux 9.0 Yes
References