EUVD-2025-18118

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

pgjdbc Client allows insecure authentication fallback despite channelBinding=require configuration

Reporter	Title	Published	Views	Family All 65
IBM Security Bulletins	Security Bulletin: IBM Event Processing is vulnerable to Improper Authentication	11 Aug 202509:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in postgresql-42.7.6.jar	20 Sep 202511:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses multiple third party dependencies which is vulnerable to CVEs.	7 Oct 202507:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	22 Dec 202509:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.2	21 Jun 202513:39	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the Management GUI are now included (CVE-2025-49146)	2 Sep 202518:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in pgjdbc affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	12 Aug 202519:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions.	30 Jun 202523:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics Certified Containers is affected by security vulnerabilities	7 Nov 202519:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Dashboards on Cloud Pak for Data has addressed security vulnerabilities.	31 Oct 202514:34	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "ae312c6a-f7f7-3b5c-aba7-bc737ee9f532",
        "vendor": {
          "name": "pgjdbc"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a025bb51-c806-31a6-ab20-205c26fafffc",
        "product": {
          "name": "pgjdbc"
        },
        "product_version": "42.7.4, < 42.7.7"
      }
    ]
  }
]

Source	Link
github	www.github.com/pgjdbc/pgjdbc/security/advisories/GHSA-hq9p-pm7w-8p54
github	www.github.com/pgjdbc/pgjdbc/commit/9217ed16cb2918ab1b6b9258ae97e6ede244d8a0
datatracker	www.datatracker.ietf.org/doc/html/rfc5802
datatracker	www.datatracker.ietf.org/doc/html/rfc7677
github	www.github.com/pgjdbc/pgjdbc
postgresql	www.postgresql.org/docs/current/sasl-authentication.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-49146

03 Oct 2025 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.18.2

EPSS0.0004

SSVC