Authentication Bypass

2020-04-1000:37:08

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.014 Low

EPSS

Percentile

86.6%

JSON

postgresql is vulnerable to authentication bypass. A flaw was found in the way PostgreSQL handles LDAP-based authentication. If PostgreSQL was configured to use LDAP authentication and the LDAP server was configured to allow anonymous binds, anyone able to connect to a given database could use this flaw to log in as any database user, including a PostgreSQL superuser, without supplying a password.

CPENameOperatorVersion
postgresqleq8.1.9__1.el5
postgresqleq8.2.4__6.el5s2
postgresqleq8.2.6__1.el5s2
postgresqleq8.2.11__1.el5s2
postgresqleq8.1.8__1.el5
postgresqleq8.2.9__1.el5s2
postgresqleq8.2.13__2.el5s2
postgresqleq8.1.11__1.el5_1.1
perl-dbd-mysqleq3.0007__2.el5
perl-dbd-mysqleq4.004__1.el5s2

Name	Operator	Version
postgresql	eq	8.1.9__1.el5
postgresql	eq	8.2.4__6.el5s2
postgresql	eq	8.2.6__1.el5s2
postgresql	eq	8.2.11__1.el5s2
postgresql	eq	8.1.8__1.el5
postgresql	eq	8.2.9__1.el5s2
postgresql	eq	8.2.13__2.el5s2
postgresql	eq	8.1.11__1.el5_1.1
perl-dbd-mysql	eq	3.0007__2.el5
perl-dbd-mysql	eq	4.004__1.el5s2