PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges t…

CVSS

4.6

Medium

EPSS

0.01

p77

Published

2000-01-01

Updated

2000-01-01

Description

PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.

Affected products

Postgresql

CVSS vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Timeline

2000-01-01

Published

2000-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: L

Local (L)

Attack Complexity

AC: L

Low (L)

Authentication

Au: N

None (N)

Confidentiality Impact

C: P

Partial

Integrity Impact

I: P

Partial

Availability Impact

A: P

Partial

Exploit indicators

EPSS

0.011 · p77

Known exploited (KEV)

Known exploits — Сканер-ВС

19875

exploitdb · https://www.exploit-db.com/exploits/19875

Enterprise

Affected software

Product	Vendor	Status
postgresql	*	Tracked

Source databases

CVE