Back to Database
Status published
Medium
CVE-2019-10210
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24...
Vulnerability Description
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24 is vulnerable via superuser writing password to unprotected temporary file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10210
Credits & Attribution
No credits recorded in the NVD database.
References
More from PostgreSQL
View All →CVE-2019-10211
Postgresql Windows installer before versions 11.5, 10.10, 9.6.15, 9.5.19, 9.4.24...
High
7.8
CVE-2019-10209
Postgresql, versions 11.x before 11.5, is vulnerable to a memory...
Low
3.1
CVE-2019-10208
A flaw was discovered in postgresql versions 9.4.x before 9.4.24,...
High
7.5
CVE-2019-10164
PostgreSQL versions 10.x before 10.9 and versions 11.x before 11.4...
High
7.5
CVE-2017-7548
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to...
High
7.5
Affected Vendor
PostgreSQL
View all reports →Affected Software
postgresql
Vulnerable Versions:
all 11.x before 11.5, all 10.x before 10.10, all 9.6.x before 9.6.15, all 9.5.x before 9.5.19, all 9.4.x before 9.4.24
Timeline
Official Publish:
October 29th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H