description: Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.
problem types: CWE-522
affected:
{
vendor: PostgreSQL
product: postgresql
versions:
version: all 11.x before 11.5, status: affected
version: all 10.x before 10.10, status: affected
version: all 9.6.x before 9.6.15, status: affected
version: all 9.5.x before 9.5.19, status: affected
version: all 9.4.x before 9.4.24, status: affected
}
metrics:
cvssV3_0: [
version: 3.0
vectorString: CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
]