PT-2021-4808
CVE-2021-23222
·
تاريخ النشر
2021-11-10
·
تاريخ التحديث
2026-09-18
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
PostgreSQL libpq (affected versions not specified)
Description
A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. The vulnerability in the libpq library of the PostgreSQL database management system is related to insufficient protection of registration data, which can allow a remote attacker to implement a man-in-the-middle attack.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾