PT-2018-1986 · Postgresql · Postgresql

Publicado 2018-08-24 · Atualizado 2018-08-24

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Postgresql versions (affected versions not specified)

Description The issue is related to an error in the interaction with LDAP through parsec-calls when receiving user security attributes. This allows a remote attacker to access information about all users in the ALD domain and significantly increase the load on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

BDU:2018-01602

Produtos afetados

Postgresql

Referências · 1

• https://bdu.fstec.ru/vul/2018-01602 · Nota de Segurança