CVE-2024-4215

The Multi Factor Authentication bypass vulnerability in pgAdmin 4

High · published May 2, 2024

CVSS v3.1
7.4
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account’s MFA enrollment status.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00634 · 49.7th percentile
Published
2024-05-02T17:42Z
EPSS history
Timeline
  • 02 MAY 17:42Z
    The Multi Factor Authentication bypass vulnerability in pgAdmin 4
    cvelistv5