VID |
25298 |
Severity |
30 |
Port |
5432 |
Protocol |
TCP |
Class |
DB |
Detailed Description |
The version of PostgreSQL installed on the remote host is 11.x prior to 11.1. It is, therefore, affected by SQL Injection.
* References: https://www.postgresql.org/about/news/1905/ https://www.postgresql.org/docs/current/release-11-1.html
* Platforms Affected: PostgreSQL prior to 11.1 Any operating system Any version |
Recommendation |
Upgrade to the latest version of PostgreSQL (11.1 or later), available from the PostgreSQL Web page at http://www.postgresql.org/download/ |
Related URL |
CVE-2018-16850 (CVE) |
Related URL |
(SecurityFocus) |
Related URL |
(ISS) |
|