{"id":"CVE-2016-7048","year":2016,"sequence":7048,"component":"packaging","score":7.5,"cvss_version":"3.0","vector":"AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","first_published":"2016-10-27","source_url":"https://www.postgresql.org/support/security/CVE-2016-7048/","facts":{"affected":{"9.1":"9.1","9.2":"9.2","9.3":"9.3","9.4":"9.4","9.5":"9.5"},"component":"packaging","cvss_version":"3.0","description_en":"","first_published":"2016-10-27","fixed":{"9.1":"9.1.24","9.2":"9.2.19","9.3":"9.3.15","9.4":"9.4.10","9.5":"9.5.5"},"id":"CVE-2016-7048","introduced":{},"published":{"9.1":"2016-10-27","9.2":"2016-10-27","9.3":"2016-10-27","9.4":"2016-10-27","9.5":"2016-10-27"},"score":7.5,"title":"Interactive installer downloads software over plain HTTP, then executes it","url":"https://www.postgresql.org/support/security/CVE-2016-7048/","vector":"AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"},"reviewed_hash":"6a65a7884245936f6adaef8709d290d460e999dfce1ad78734fa7c9a324ed325","source_hash":"965b9e2323feab543f3cbeb74c418c3a5b43cbefc6594d2862ff0d24dcf8e6a2","text":null,"locales":["en"],"fixes":[{"major":"9.1","fixed_version":"9.1.24","introduced":null,"published_date":"2016-10-27","facts":{"fixed":"9.1.24","introduced":null,"published":"2016-10-27"}},{"major":"9.2","fixed_version":"9.2.19","introduced":null,"published_date":"2016-10-27","facts":{"fixed":"9.2.19","introduced":null,"published":"2016-10-27"}},{"major":"9.3","fixed_version":"9.3.15","introduced":null,"published_date":"2016-10-27","facts":{"fixed":"9.3.15","introduced":null,"published":"2016-10-27"}},{"major":"9.4","fixed_version":"9.4.10","introduced":null,"published_date":"2016-10-27","facts":{"fixed":"9.4.10","introduced":null,"published":"2016-10-27"}},{"major":"9.5","fixed_version":"9.5.5","introduced":null,"published_date":"2016-10-27","facts":{"fixed":"9.5.5","introduced":null,"published":"2016-10-27"}}],"legacy":[]}