Multi-Factor Authentication Bypass Vulnerability Affects pgAdmin

CVE-2024-4215

What is CVE-2024-4215?

A serious vulnerability exists in pgAdmin versions up to 8.5, which allows an attacker to bypass multi-factor authentication (MFA). This issue enables individuals who possess valid usernames and passwords to gain unauthorized access to the application, effectively disregarding the MFA security measures. Once authenticated, attackers can execute sensitive operations, including managing files and running SQL queries. This creates a significant risk to data integrity and user privacy within the application.

References