Lucene search
GoogleOSV:CVE-2024-45624HistorySep 12, 2024 - 5:15 a.m.
CVE-2024-45624
2024-09-1205:15:05
Google
osv.dev
cve-2024-45624
sensitive information
incompatible policies
pgpool-ii
database user
query cache
table data
unauthorized
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
Low
Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.
Related
nvd
nvd
CVE-2024-45624
2024-09-12 05:15:05
cve
cve
CVE-2024-45624
2024-09-12 05:15:05
debiancve
debiancve
CVE-2024-45624
2024-09-12 05:15:05
vulnrichment
vulnrichment
CVE-2024-45624
2024-09-12 04:33:40
jvn
jvn
JVN#67456481: Pgpool-II vulnerable to information disclosure
2024-09-09 00:00:00
cvelist
cvelist
CVE-2024-45624
2024-09-12 04:33:40
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.3
Confidence
Low
Related for OSV:CVE-2024-45624