Base Score

MEDIUM6.5

CVE-2016-0767

PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath.

VectorNETWORK

Published Bysecalert@redhat.com

Published DateJun 06, 2017, 18:29

Affected Versions(1)

postgresql:pljava-public(Maven)

Introduced0

Fixed1.5.0

LimitN/A

Package (Ecosystem)	Introduced	Fixed	Limit
postgresql:pljava-public(Maven)	0	1.5.0	N/A

Weakness Type (CWE):CWE-269

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE

References

https://tada.github.io/pljava/releasenotes.html

Base Score

MEDIUM6.5

Weakness Type (CWE):CWE-269

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Base Severity

MEDIUM

Version

3.1

Attack Vector (AV)

NETWORK

Attack Complexity (AC)

LOW

Privileges Required (PR)

LOW

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

NONE

Integrity (I)

HIGH

Availability (A)

NONE