Beveiligingsadvies

CVE-2026-13455

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-30 15:19:57

Laatst bijgewerkt 2026-06-30 15:57:53

Toegewezen door PostgreSQL

CVSS-score 4.3

Status PUBLISHED

Beschrijving

PostgreSQL Anonymizer contains a vulnerability that allows unprivileged masked users to repeatedly call the anon.hash() function and collects (seed, hash_output) pairs to perform an offline brute-force attack and deduce the salt. The problem is resolved in PostgreSQL Anonymizer 3.1.2 and later versions

← Alle CVE's bekijken Bekijk op cve.org ↗