Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2021/04/27 3:54 p.m.•67 views

Pgsync Contains Cleartext Transmission of Sensitive Information

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used...

7.5CVSS7AI score0.00731EPSS
SaveExploits1References6Affected Software1
Snyk
Snyk
•added 2021/04/27 11:09 a.m.•4 views

Information Exposure

Overview pgsync is a Sync Postgres data between databases. Affected versions of this package are vulnerable to Information Exposure due to mishandling of schema syncing using the --schema-first and --schema-only flags, which may result in dropping security parameters. Remediation Upgrade pgsync t...

7.5CVSS6.9AI score0.00731EPSS
SaveExploits1References2
NVD
NVD
•added 2021/04/27 3:15 a.m.•37 views

CVE-2021-31671

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used...

7.5CVSS0.00731EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/04/27 3:15 a.m.•8 views

CVE-2021-31671

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used...

7.5CVSS6.9AI score0.00731EPSS
SaveExploits1References2
Mend
Mend
•added 2021/04/27 2:43 a.m.•1 views

CVE-2021-31671

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used...

8.7CVSS0.00731EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2021/04/27 12:00 a.m.•1 views

PT-2021-19473

Name of the Vulnerable Software and Affected Versions pgsync versions prior to 0.6.7 Description The issue concerns the mishandling of syncing the schema with the --schema-first and --schema-only options, leading to information disclosure of sensitive information. For example, the sslmode...

7.5CVSS0.00731EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/27 12:00 a.m.•5 views

CVE-2021-31671: Cleartext Transmission of Sensitive Information

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used...

7.5CVSS5.8AI score0.00731EPSS
SaveExploits1References2
Rows per page
Query Builder