Lucene search

K
redhatcveRedhat.comRH:CVE-2017-7546
HistoryOct 10, 2019 - 3:58 a.m.

CVE-2017-7546

2019-10-1003:58:16
redhat.com
access.redhat.com
17

0.28 Low

EPSS

Percentile

96.9%

It was found that authenticating to a PostgreSQL database account with an empty password was possible despite libpq’s refusal to send an empty password. A remote attacker could potentially use this flaw to gain access to database accounts with empty passwords.