Description


pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Related CPE's


References


https://github.com/ankane/pgsync/issues/121

ExploitIssue TrackingThird Party Advisory

Weaknesses



CWE-319

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

7.5 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information


Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-04-27T03:15:07.647

4 years ago

Last modified

2021-05-04T00:16:15.383

4 years ago