
Cloud Vulnerability DB
A community-led vulnerabilities database
CVE-2020-25694 is a security vulnerability affecting PostgreSQL database management system that allows reconnection to downgrade connection security settings. The vulnerability was discovered and disclosed in 2020, with fixes released in January 2021 through various Red Hat Enterprise Linux security updates (Red Hat Advisory).
The vulnerability affects the PostgreSQL database system's connection handling mechanism. It specifically impacts how security settings are maintained during reconnection attempts, potentially allowing for a downgrade of security parameters. This issue was addressed in PostgreSQL versions 9.6.20, 10.15, and 12.5 through security updates (Red Hat Advisory).
If exploited, this vulnerability could allow an attacker to downgrade security settings during connection attempts to PostgreSQL databases, potentially compromising the security of database connections (Red Hat Advisory).
The vulnerability has been patched in multiple PostgreSQL versions. Users are advised to upgrade to PostgreSQL versions 9.6.20, 10.15, or 12.5 or later. For Red Hat Enterprise Linux users, security updates are available through RHSA-2021:0165, RHSA-2021:0166, and RHSA-2021:0167 advisories (Red Hat Advisory).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."