Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-46801

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be abl

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an attacker may be able to log in to the system as an arbitrary user, allowing them to read or tamper with data in the database, and/or disable the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PgPool Global Development Group Pgpool-II

  • 4.6.0affected

PgPool Global Development Group Pgpool-II

  • 4.5.0 to 4.5.6affected

PgPool Global Development Group Pgpool-II

  • 4.4.0 to 4.4.11affected

PgPool Global Development Group Pgpool-II

  • 4.3.0 to 4.3.14affected

PgPool Global Development Group Pgpool-II

  • 4.2.0 to 4.2.21affected

PgPool Global Development Group Pgpool-II

  • All versions of 4.1 seriesaffected

PgPool Global Development Group Pgpool-II

  • All versions of 4.0 seriesaffected

References