CVSS 8.1 · High EPSS 1,6%
Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada postgresql, debian linux. Skor CVSS 3.1 8.1 (High) menurut NVD.
A flaw was found in PostgreSQL versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If a client application that creates additional database connections only reuses the basic connection parameters while dropping security-relevant parameters, an opportunity for a man-in-the-middle attack, or the ability to observe clear-text transmissions, could exist. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| postgresql | postgresql | Semua versi sebelum 9.5.24 |
| postgresql | postgresql | Versi 9.6.0 hingga sebelum 9.6.20 |
| postgresql | postgresql | Versi 10.0 hingga sebelum 10.15 |
| postgresql | postgresql | Versi 11.0 hingga sebelum 11.10 |
| postgresql | postgresql | Versi 12.0 hingga sebelum 12.5 |
| postgresql | postgresql | Versi 13.0 hingga sebelum 13.1 |
| debian | debian linux | Versi 9.0 |