User enumeration In postgresql
Description
It was discovered that the pgcrypto module could return different error messages when decrypting certain data with an incorrect key. This could potentially help an authenticated user to launch a possible cryptographic attack, although no suitable attack is currently known.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel7 | 0:9.2.13-1.el7_1 | ||
rpm rhel5 | - | - | |
rpm rhel6 | 0:8.4.20-3.el6_6 | ||
rpm rhel5 | - | - |
Aliases
1. 2. 3.