Описание
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
EPSS
Процентиль: 8%
0.00035
Низкий
8.1 High
CVSS3
Дефекты
CWE-324
Связанные уязвимости
CVSS3: 8.1
ubuntu
4 месяца назад
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
CVSS3: 8.1
debian
4 месяца назад
Password can be used past expiry in PgBouncer due to auth_query not ta ...
CVSS3: 8.1
github
4 месяца назад
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
EPSS
Процентиль: 8%
0.00035
Низкий
8.1 High
CVSS3
Дефекты
CWE-324