CVEs-PoC/2016/CVE-2016-2193.md

CVE-2016-2193

Description

PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.

POC

Reference

No PoCs from references.

Github

• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/pedr0alencar/vlab-metasploitable2