Password Logging Vulnerability in EDB Postgres Advanced Server by EnterpriseDB

CVE-2023-31043

What is CVE-2023-31043?

EDB Postgres Advanced Server suffers from a vulnerability where unredacted passwords can be logged during the execution of optional parameters associated with the CREATE, ALTER USER, GROUP, and ROLE commands. This occurs even when password redaction is configured through the edb_filter_log.redact_password_commands setting. Users of affected versions risk exposing sensitive password information, as the system fails to appropriately redact this data, thereby potentially compromising the security of the database environment.

References