Lucene search
HistorySep 12, 2024 - 5:15 a.m.
CVE-2024-45624
cve-2024-45624
pgpool-ii
sensitive information
incompatible policies
unauthorized access
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.6%
Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.
Related
osv
osv
CVE-2024-45624
2024-09-12 05:15:05
cve
cve
CVE-2024-45624
2024-09-12 05:15:05
debiancve
debiancve
CVE-2024-45624
2024-09-12 05:15:05
vulnrichment
vulnrichment
CVE-2024-45624
2024-09-12 04:33:40
jvn
jvn
JVN#67456481: Pgpool-II vulnerable to information disclosure
2024-09-09 00:00:00
cvelist
cvelist
CVE-2024-45624
2024-09-12 04:33:40
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2024-45624