PostgreSQL before 9.5.x before 9.5.2 does not properly maintain row-security status in cached plans, which might allow attackers to bypass intended access restrictions by leveraging a session that performs queries as more than one role.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Postgresql | Postgresql | 9.5 (including) | 9.5 (including) |
| Postgresql | Postgresql | 9.5.1 (including) | 9.5.1 (including) |
| Postgresql-9.5 | Ubuntu | upstream | * |