Korean
<< Back
VID 25298
Severity 30
Port 5432
Protocol TCP
Class DB
Detailed Description The version of PostgreSQL installed on the remote host is 11.x prior to 11.1.
It is, therefore, affected by SQL Injection.

* References:
https://www.postgresql.org/about/news/1905/
https://www.postgresql.org/docs/current/release-11-1.html

* Platforms Affected:
PostgreSQL prior to 11.1
Any operating system Any version
Recommendation Upgrade to the latest version of PostgreSQL (11.1 or later), available from the PostgreSQL Web page at http://www.postgresql.org/download/
Related URL CVE-2018-16850 (CVE)
Related URL (SecurityFocus)
Related URL (ISS)