EXPOSURES › CVE-2018-1115
CVE-2018-1115
CRITICAL
DETAIL
SourceNVD · cve
Published2018-05-10
CVSS9.1
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2018-1115 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
Vulnerability in adminpack extension allows attackers to force log rotation, indicating a significant security flaw in PostgreSQL's ACL handling.
Vulnerability in adminpack extension allows attackers to force log rotation, indicating a significant security flaw in PostgreSQL's ACL handling.
"postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation."
No usable content; bridge error.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.