Description
PostgreSQL 9.2.x before 9.2.4 and 9.1.x before 9.1.9 does not properly check REPLICATION privileges, which allows remote authenticated users to bypass intended backup restrictions by calling the (1) pg_start_backup or (2) pg_stop_backup functions.
Remediation
References
Related Vulnerabilities
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3092)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2001-1247)
WordPress Plugin Live Comment Preview Cross-Site Scripting (2.0.2)
MySQL CVE-2020-14870 Vulnerability (CVE-2020-14870)
Ampache Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-3929)