This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2024-4545 | BDVDB-2026-235015 Detail

EnterpriseDBEDB Postgres Advanced Server

Description#

All versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass role permissions from pg_read_server_files. This could allow low privilege users to read files to which they would not otherwise have access.

Impact#

CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels

Weaknesses#

  • CWE-269 Improper Privilege Management

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.