Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2023-1907

Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

Description

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pgadmin

Default version status: unaffected

  • 0 to < 7.0affected

References