« List of all CVEs

CVE-2016-2193

Published: 4/11/2016 Last updated: 8/5/2024 Reserved: 1/29/2016

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

CNA assigner: redhat (53f830b8-0a3f-465b-8143-3b8a9948e749) Requested by: n/a

Opam packages affected (5)

conf-mingw-w64-postgresql-i686 conf-mingw-w64-postgresql-x86_64 conf-postgresql ocsigen-start postgresql

Products affected (1)

Product Vendor Version
n/a n/a < 65727331b60197b742089855ac09464c22b96f66

References (8)