CVE-2019-10210

low-risk

Published 2019-10-29

Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.

Do I need to act?

0.28% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 7.0/10 High

LOCAL / HIGH complexity

Affected Products (1)

Postgresql

Affected Vendors

Postgresql

References (4)

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10210

Vendor Advisory https://www.postgresql.org/about/news/1960/

Issue Tracking https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10210

Vendor Advisory https://www.postgresql.org/about/news/1960/

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal