Postgresql: Security Vulnerabilities
PostgreSQL stores usernames and passwords in plaintext in (1) pg_shadow and (2) pg_pwd, which allows attackers with sufficient privileges to gain access to databases.
CVSS Score
4.6
EPSS Score
0.009
Published
2001-08-31
Insecure directory permissions in RPM distribution for PostgreSQL allows local users to gain privileges by reading a plaintext password file.
CVSS Score
2.1
EPSS Score
0.004
Published
1999-12-02
Page 20