Lucene search
This script is Copyright (C) 2017-2024 and is owned by Tenable, Inc. or an Affiliate thereof.POSTGRES_AUTH_EMPTY_PASSWORD.NBINHistoryOct 20, 2017 - 12:00 a.m.
PostgreSQL Empty Password Handling Remote Authentication Bypass
2017-10-2000:00:00
This script is Copyright (C) 2017-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
42
PostgreSQL contains a flaw that is triggered when attempting to authenticate to the database with an empty password using a modified or a non-libpq-based client. This allows a remote attacker to bypass authentication mechanisms.
Binary data postgres_auth_empty_password.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| postgresql | postgresql | cpe:/a:postgresql:postgresql |