Man-in-the-Middle Vulnerability in PostgreSQL by PostgreSQL Global Development Group

CVE-2020-25694

Summary

PostgreSQL versions prior to 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24 are susceptible to a flaw that could allow attackers to exploit weakened connection settings. This occurs when client applications drop security-critical connection parameters, potentially enabling a man-in-the-middle attack. As a result, sensitive data in transit could be intercepted, compromising both confidentiality and integrity, and threatening system availability.

References