Beveiligingsadvies

CVE-2025-2291

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-16 18:00:05

Laatst bijgewerkt 2025-11-03 19:42:15

Toegewezen door PostgreSQL

CVSS-score 8.1

Status PUBLISHED

Beschrijving

Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password

← Alle CVE's bekijken Bekijk op cve.org ↗