Description
PgpoolAdmin 4.0 and earlier allows remote attackers to bypass the login authentication and obtain the administrative privilege of the PostgreSQL database via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PgPool Global Development Group | PgpoolAdmin | 4.0 and earlier | — |
References
- https://pgpool.net/mediawiki/index.php/Main_Page
- JVN#13199224 third-party-advisory