What is CVE-2023-1907?

CVE-2023-1907 is a high-severity vulnerability in Pgadmin, classified under CWE-488. CVSS score: 8.0/10. Published 2025-01-09.

How severe is CVE-2023-1907?

High severity. CVSS v3 base score is 8.0 out of 10.

Vulnerability in Pgadmin

CVE-2023-1907

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.

EPSS: 0.004 (36.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H.

Affected products

Pgadmin

Weakness classification (CWE)

CWE-488
CWE-276 — Incorrect Default Permissions

References

secalert@redhat.com (x_refsource_REDHAT, Third Party Advisory, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Third Party Advisory, Issue Tracking)

Frequently asked questions

What is CVE-2023-1907?: CVE-2023-1907 is a high-severity vulnerability in Pgadmin, classified under CWE-488. CVSS score: 8.0/10. Published 2025-01-09.
How severe is CVE-2023-1907?: High severity. CVSS v3 base score is 8.0 out of 10.