CVE-2010-1975 PUBLISHED CVSS 5.5 MEDIUM

PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21, 8.2 before 8.2.17, 8.3 before 8.3.11, and 8.4 before 8.4.4 does not properly check privileges during certain RESET ALL operations, which allows remote authenticated users to remove arbitrary parameter settings via a (1) ALTER USER or (2) ALTER DATABASE statement.

EPSS 0.28% · 51.0th percentile

Risk Scores

CVSS v2.0
5.5
EPSS Score
0.28%
51.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
postgresqlpostgresql7.4, 7.4.1, 7.4.2

Timeline

References

Open in Interactive Console →