Bypass Role Permissions Vulnerability in EPAS

CVE-2024-4545

What is CVE-2024-4545?

A vulnerability exists in EnterpriseDB Postgres Advanced Server versions prior to 15.7.0 and 16.3.0, where users utilizing the edbldr tool can potentially bypass role permissions associated with pg_read_server_files. This exploitation may permit low-privilege users to access files that they normally do not have permissions to read, thereby posing a risk of unauthorized data exposure. Organizations using affected versions should consider applying available patches and updates to mitigate this security concern.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References