Korean
<< Back
VID 25279
Severity 30
Port 5432
Protocol TCP
Class DB
Detailed Description The version of PostgreSQL installed on the remote host is 10.x prior to 10.4.
It is, therefore, Insecure ACL Remote Issue.

* References:
https://www.postgresql.org/about/news/1851/
https://www.us-cert.gov/ncas/bulletins/SB18-134

* Platforms Affected:
PostgreSQL prior to 10.4
Any operating system Any version
Recommendation Upgrade to the latest version of PostgreSQL (10.4 or later), available from the PostgreSQL Web page at http://www.postgresql.org/download/
Related URL CVE-2018-1115 (CVE)
Related URL 104285 (SecurityFocus)
Related URL (ISS)