Lucene search

CVE-2024-9014 OAuth2 client id and secret exposed through the web browser in pgAdmin 4

🗓️ 23 Sep 2024 17:00:04Reported by PostgreSQLType

OAuth2 client id and secret exposure in pgAdmin

Reporter	Title	Published	Views	Family All 13
Tenable Nessus	Fedora 40 : pgadmin4 (2024-126d22c121)	4 Oct 202400:00	–	nessus
Cvelist	CVE-2024-9014 OAuth2 client id and secret exposed through the web browser in pgAdmin 4	23 Sep 202417:04	–	cvelist
OSV	OAuth2 client ID and secret exposed through the web browser	23 Sep 202418:30	–	osv
OSV	Security update for pgadmin4	29 Oct 202412:55	–	osv
OpenVAS	Fedora: Security Advisory (FEDORA-2024-126d22c121)	4 Oct 202400:00	–	openvas
OpenVAS	openSUSE: Security Advisory for pgadmin4 (SUSE-SU-2024:3771-1)	30 Oct 202400:00	–	openvas
CVE	CVE-2024-9014	23 Sep 202417:15	–	cve
Fedora	[SECURITY] Fedora 40 Update: pgadmin4-8.9-3.fc40	4 Oct 202401:47	–	fedora
Fedora	[SECURITY] Fedora 41 Update: pgadmin4-8.12-1.fc41	7 Oct 202400:16	–	fedora
NVD	CVE-2024-9014	23 Sep 202417:15	–	nvd

[
  {
    "cpes": [
      "cpe:2.3:a:postgresql:pgadmin_4:*:*:*:*:*:*:*:*"
    ],
    "vendor": "postgresql",
    "product": "pgadmin_4",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.12",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
github	www.github.com/pgadmin-org/pgadmin4/issues/7945

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Sep 2024 17:04Current

6.8Medium risk

Vulners AI Score6.8

CVSS39.9

EPSS0.009

SSVCNaN