Description
PostgreSQL versions 8.4 - 9.6 are vulnerable to information leak in pg_user_mappings view which discloses foreign server passwords to any user having USAGE privilege on the associated foreign server.
Remediation
References
Related Vulnerabilities
WordPress Plugin dwnldr Cross-Site Scripting (1.0)
Magento CVE-2019-8133 Vulnerability (CVE-2019-8133)
WordPress Plugin Google Drive for WordPress Arbitrary File Deletion (2.2)
Joomla! Core 1.0.x Multiple Unspecified Vulnerabilities (1.0.0 - 1.0.5)
WordPress Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2014-6412)