CVE-2016-2193.json

{
    "CVE-ID": "CVE-2016-2193",
    "NVD": {
        "Descriptions": "PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.",
        "Cvss2_BaseScore": 5,
        "Cvss3_BaseScore": 7.5,
        "Cvss2_VectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
        "Cvss3_VectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
        "CPEs": [
            {
                "URI": "cpe:/a:postgresql:postgresql:9.5.1",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:9.5.1:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            },
            {
                "URI": "cpe:/a:postgresql:postgresql:9.5",
                "FormattedString": "cpe:2.3:a:postgresql:postgresql:9.5:*:*:*:*:*:*:*",
                "VersionStartExcluding": "",
                "VersionStartIncluding": "",
                "VersionEndExcluding": "",
                "VersionEndIncluding": ""
            }
        ]
    },
    "Official": {
        "9.5.2": {
            "source": [
                "https://www.postgresql.org/support/security/9.5/",
                "https://www.postgresql.org/docs/release/9.5.2/"
            ]
        }
    }
}