Bypass Role Permissions Vulnerability in EPAS

CVE-2024-4545

What is CVE-2024-4545?

A vulnerability exists in EnterpriseDB Postgres Advanced Server versions prior to 15.7.0 and 16.3.0, where users utilizing the edbldr tool can potentially bypass role permissions associated with pg_read_server_files. This exploitation may permit low-privilege users to access files that they normally do not have permissions to read, thereby posing a risk of unauthorized data exposure. Organizations using affected versions should consider applying available patches and updates to mitigate this security concern.

References