CVE-2016-2193

Source
https://nvd.nist.gov/vuln/detail/CVE-2016-2193
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2193.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-2193
Downstream
Related
Withdrawn
2025-08-20T16:01:33.730919Z
Published
2016-04-11T15:59:04Z
Modified
2025-08-20T03:32:21Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

References

Affected packages

Git / git.postgresql.org/git/postgresql.git

Affected ranges

Type
GIT
Repo
https://git.postgresql.org/git/postgresql.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
616eaa396a9bf82d8208a79367d784590be9370d
Last affected
cdd4ed5449bf317cc71b45a8deee0173822e7592