Business information leak In postgresql
Description
An information leak flaw was found in the wathe PostgreSQL database server handled certain error messages. An authenticated database user could possibly obtain the results of a query they did not have privileges to execute by observing the constraint violation error messages produced when the query was executed.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel6 | 0:8.4.20-2.el6_6 | ||
rpm rhel7 | 0:9.2.10-2.el7_1 | ||
rpm rhel5 | - | - | |
rpm rhel5 | - | - |
Aliases
1. 2. 3.