30th September 2021: PostgreSQL 14 Released!

CVE-2017-7547

pg_user_mappings view discloses passwords to users lacking server privileges

Version Information

Affected Version Fixed In Fix Published
9.6 9.6.4 2017-08-10
9.5 9.5.8 2017-08-10
9.4 9.4.13 2017-08-10
9.3 9.3.18 2017-08-10
9.2 9.2.22 2017-08-10

For more information about PostgreSQL versioning, please visit the versioning page.

CVSS 3.0

Overall Score 8.5
Component core server
Vector AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Reporting Security Vulnerabilities

If you wish to report a new security vulnerability in PostgreSQL, please send an email to security@postgresql.org.

For reporting non-security bugs, please see the Report a Bug page.