1 matches found
postgresql: Too-permissive access control list on function pg_logfile_rotate()
It was found that pgcatalog.pglogfilerotate, from the adminpack extension, did not follow the same ACLs than pgroratelogfile. If the adminpack is added to a database, an attacker able to connect to it could use this flaw to force log rotation...
9.1CVSS7.3AI score0.04042EPSS
SaveExploits0References4
20