Skip to content

CVE-2016-0767 PostgreSQL PL/Java Improper Privilege Management

MediumCVSS 6.5 EPSS 0.93%
Published
Updated
Exploit status
No public exploit known

Description

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath.

Affected products

ProductAffected versionsFixed in
postgresql/pljava-public(Maven) < 1.5.0 1.5.0
postgresql/pljava-public(Maven) = 1.0.0b4 No fix listed
pljava project pljava <= 1.4.3 No fix listed

References