ID de Prueba:	1.3.6.1.4.1.25623.1.0.112428
Categoría:	Databases
Título:	PostgreSQL < 10.6, 11.x < 11.1 SQL Injection Vulnerability (Windows)
Resumen:	PostgreSQL is prone to an SQL injection vulnerability.
Descripción:	Summary: PostgreSQL is prone to an SQL injection vulnerability. Vulnerability Insight: A SQL Injection flaw has been discovered in PostgreSQL server in the way triggers that enable transition relations are dumped. The transition relation name is not correctly quoted and it may allow an attacker with CREATE privilege on some non-temporary schema or TRIGGER privilege on some table to create a malicious trigger that, when dumped and restored, would result in additional SQL statements being executed. Affected Software/OS: PostgreSQL before versions 10.6 and 11.1. Solution: Update to version 10.6 or 11.1 respectively. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2018-16850
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.