2 matches found
CVE-2021-31671
pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used...
CVE-2021-31671
Summary: CVE-2021-31671 affects pgsync prior to 0.6.7. The vulnerability arises from mishandling of schema syncing with --schema-first/--schema-only, which can drop the sslmode parameter, causing SSL to be unused and potentially exposing sensitive data. Impact details (as stated): Information Dis...