CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.0
CWE Name:  Permissions Privileges and Access Controls
Summary: untrusted search path vulnerability in postgresql before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a security definer function, to gain the privileges of the function owner, related to "search_path settings."
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2007-04-24
Last Modified Date: 2018-10-19
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Permissions Privileges and Access Controls.
user
CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 6.0
CWE Name:  Permissions Privileges and Access Controls
Summary: untrusted search path vulnerability in postgresql before 7.3.19, 7.4.x before 7.4.17, 8.0.x before 8.0.13, 8.1.x before 8.1.9, and 8.2.x before 8.2.4 allows remote authenticated users, when permitted to call a security definer function, to gain the privileges of the function owner, related to "search_path settings."
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2007-04-24
Last Modified Date: 2018-10-19
assistant