Fedora: Security Advisory (FEDORA-2024-4d4ceb61f7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : pgadmin4 / python-libgravatar (2024-4d4ceb61f7)

The remote Fedora 40 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2024-4d4ceb61f7 advisory. Update to pgadmin4-8.6 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

SUSE: Security Advisory (SUSE-SU-2024:1340-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Authentication Bypass

pgadmin4 is vulnerable to Authentication Bypass. The vulnerability is due to a flaw in the multi-factor authentication process, which allows an attacker with knowledge of a legitimate account's username and password to authenticate to the application and perform sensitive actions within the...

Fedora 37 : pgadmin4 (2023-496439cbdd)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-496439cbdd advisory. Update to 6.18. Backport fix for CVE-35065 of bundled glob-parent. Tenable has extracted the preceding description block directly from the Fedora security...

[SECURITY] Fedora 39 Update: pgadmin4-7.8-5.fc39

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

openSUSE Security Advisory (SUSE-SU-2024:1340-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2024:1340-1 Security update for pgadmin4

This update for pgadmin4 fixes the following issues: - CVE-2024-2044: Fixed unsafe deserialization and Remote Code Execution by an authenticated user bsc1221172...

Fedora: Security Advisory (FEDORA-2024-db558f6fb2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for pgadmin4 (FEDORA-2024-15df3b6d95)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Path Traversal

pgadmin4 is vulnerable to Path Traversal. The vulnerability is due to Insufficient Input Validation due to concatenating the sessions directory path with the session ID using the os.path.join function, without setting a trusted base path, allowing an attacker to manipulate the session ID and...

[SECURITY] Fedora 39 Update: pgadmin4-7.8-3.fc39

pgAdmin is the most popular and feature rich Open Source administration and d evelopment platform for PostgreSQL, the most advanced Open Source database in the world...

Fedora 39 : pgadmin4 (2024-9818cb2406)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-9818cb2406 advisory. Fix CVE-2023-26159. ---- Relax requirements. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2023-49438 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2023-49438 Source advisory: OSV:GHSA-672H-6X89-76M5...

faradaysec (>=4.1.0, <=5.22.0), pgadmin4 (>=5.4.0, <=6.21.0) potentially affected by CVE-2023-49438 via flask-security-too (4.1.6)

flask-security-too PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =4.1.0, =5.4.0, =6.21.0 Source cves: CVE-2023-49438 Source advisory: OSV:GHSA-672H-6X89-76M5...

faradaysec (>=3.14.1, <=3.14.4), pgadmin4 (>=4.22.0, <=5.3.0) potentially affected by CVE-2023-49438 via flask-security-too (3.4.5)

flask-security-too PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =3.14.1, =4.22.0, =5.3.0 Source cves: CVE-2023-49438 Source advisory: OSV:PYSEC-2023-248...

faradaysec (>=4.1.0, <=5.22.0), pgadmin4 (>=5.4.0, <=6.21.0) potentially affected by CVE-2023-49438 via flask-security-too (4.1.6)

flask-security-too PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on flask-security-too and may be impacted: - faradaysec =4.1.0, =5.4.0, =6.21.0 Source cves: CVE-2023-49438 Source advisory: OSV:PYSEC-2023-248...

faradaysec (>=3.14.1, <=5.22.0), flask-authoob (>=0.0.21, <=0.0.34) +13 more potentially affected by CVE-2023-49438 via flask-security-too (>=3.2.0rc1, <=5.2.0)

flask-security-too PYPI version =3.2.0rc1, =3.14.1, =0.0.21, =0.3.1, =4.22.0, =6.0.1, =7.0.0, =6.0.0, =7.0.8.dev28841, =2.0.0, =3.5.6.dev19088, =1.0.3.dev126, =3.1.0, =2.1.0, =0.0.21, =1.0.2.dev51 Source cves: CVE-2023-49438 Source advisory: MEND:CVE-2023-49438...

Fedora: Security Advisory for pgadmin4 (FEDORA-2023-8cc61c8b14)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for pgadmin4 (FEDORA-2023-478aa17fa2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...