PT-2019-9267

CVE-2018-16203

·

Published

2019-01-09

·

Updated

2019-10-03

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PgpoolAdmin versions 4.0 and earlier
Description The issue allows remote attackers to bypass login authentication and obtain administrative privileges of the PostgreSQL database. The exact vectors used for the attack are not specified.
Recommendations For PgpoolAdmin versions 4.0 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Researchers
Vendors
Affected products
Related identifiers
CVE-2018-16203
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com