BIT-postgresql-2021-23222 PUBLISHED CVSS 5.900000095367432 MEDIUM

A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.

Risk Scores

CVSS v3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected Products

VendorProductVersions
Bitnamipostgresql9.6.0, 10.0.0, 11.0.0

Timeline

References

Open in Interactive Console →