Lucene search
+L

3 matches found

Vulnrichment
Vulnrichment
•added 2024/05/09 6:12 p.m.•25 views

CVE-2024-4545 EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldr

All versions of EnterpriseDB Postgres Advanced Server EPAS from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass role permissions from pgreadserverfiles. This could allow low privilege users to read files to which they would not otherwise have access...

7.7CVSS6.8AI score0.0053EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/05/09 6:12 p.m.•43 views

CVE-2024-4545 EDB Postgres Advanced Server (EPAS) authenticated file read permissions bypass using edbldr

All versions of EnterpriseDB Postgres Advanced Server EPAS from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass role permissions from pgreadserverfiles. This could allow low privilege users to read files to which they would not otherwise have access...

7.7CVSS7.7AI score0.0053EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•10 views

PT-2024-31639

Name of the Vulnerable Software and Affected Versions: EnterpriseDB Postgres Advanced Server EPAS versions 15.0 through 15.6.x EnterpriseDB Postgres Advanced Server EPAS versions 16.0 through 16.2.x Description: The issue allows users utilizing edbldr to bypass role permissions from pg read serve...

7.7CVSS0.0053EPSS
SaveExploits0References4
Rows per page
Query Builder