Количество 7
Количество 7
CVE-2025-2291
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
CVE-2025-2291
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
CVE-2025-2291
PgBouncer default auth_query does not take Postgres password expiry into account
CVE-2025-2291
Password can be used past expiry in PgBouncer due to auth_query not ta ...
GHSA-qj9w-64mv-p2fw
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
BDU:2025-07307
Уязвимость программы для пула соединения в PostgreSQL PgBouncer, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить несанкционированный доступ к приложению
ROS-20250619-05
Уязвимость pgbouncer
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-2291 Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-2291 Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | CVE-2025-2291 PgBouncer default auth_query does not take Postgres password expiry into account | CVSS3: 8.1 | 0% Низкий | 5 месяцев назад |
| CVE-2025-2291 Password can be used past expiry in PgBouncer due to auth_query not ta ... | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
| GHSA-qj9w-64mv-p2fw Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | BDU:2025-07307 Уязвимость программы для пула соединения в PostgreSQL PgBouncer, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить несанкционированный доступ к приложению | CVSS3: 8.1 | 0% Низкий | больше 1 года назад |
 | ROS-20250619-05 Уязвимость pgbouncer | CVSS3: 8.1 | 0% Низкий | около 1 года назад |
Уязвимостей на страницу