---
cve: "CVE-2017-15097"
severity: "MEDIUM"
cvss: 6.5
epss: "54%"
vendor: "Red Hat"
kev: false
exploited: false
published: "2018-07-27 20:29:00"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-08T16:19:42+02:00"
---

# CVE-2017-15097

> 6.5 MEDIUM

## Beschreibung

Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. An attacker with access to the postgres user account could use these flaws to obtain root access on the server machine.

## CVSS-Vektor

```
CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://access.redhat.com/errata/RHSA-2017:3402>
- <https://access.redhat.com/errata/RHSA-2017:3403>
- <https://access.redhat.com/errata/RHSA-2017:3405>
- <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-15097>
- <http://www.securitytracker.com/id/1039983>
- <https://access.redhat.com/errata/RHSA-2017:3404>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2017-15097) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_