FortiClient VulnerabilityPostgreSQL CVE-2018-1115 Permission Bypass Vulnerability
Description
It was found that pg_catalog.pg_logfile_rotate(), from the adminpack extension, did not follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could use this flaw to force log rotation.
Affected Applications
PostgreSQL
CVE References
CVE-2018-1115Other References
https://access.redhat.com/security/cve/CVE-2018-1115| ID | 50143 |
| Created | Aug 17, 2018 |
| Description Updated |
Jan 16, 2024 |
| Risk |
|
| Coverage | FortiClient |
| OS | MacOS |
| Vendor | PostgreSQL |
| Patch | manual |
| Application | PostgreSQL |