CVE-2023-1907CWE-488

Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

High · published January 9, 2025

CVSS v3.1
8.0
EPSS
0%
Percentile
37.6
In the wild
Unconfirmed
What it is

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00445 · 37.6th percentile
Weakness
CWE-488 · Exposure of Data Element to Wrong Session
Published
2025-01-09T07:26Z
EPSS history
Timeline
  • 09 JAN 07:26Z
    Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session
    cvelistv5