Re: BUG #16580: PostgreSQL PassTheHash Protocol Design Weakness Detected - vulnerability - Mailing list pgsql-bugs

From Stephen Frost
Subject Re: BUG #16580: PostgreSQL PassTheHash Protocol Design Weakness Detected - vulnerability
Date
Msg-id 20200812205421.GY29590@tamriel.snowman.net
Whole thread Raw
In response to BUG #16580: PostgreSQL PassTheHash Protocol Design Weakness Detected - vulnerability  (PG Bug reporting form <noreply@postgresql.org>)
List pgsql-bugs
Greetings,

* PG Bug reporting form (noreply@postgresql.org) wrote:
> PostgreSQL PassTheHash Protocol Design Weakness Detected - this is the
> vulnerability detected by our internal scan tool 'qualys'.
> Could you please help us understand and remediate the solution for this
> vulnerability.

Use SCRAM.

> We have 4 environments in total and only 1 env has postgres and other 3 have
> MySQL. Why do we see this vulnerability in all 4 environments, even in the
> env's where postgres isn't there. Please advise.

... no idea.

Thanks,

Stephen

Attachment

pgsql-bugs by date:

Previous
From: PG Bug reporting form
Date:
Subject: BUG #16580: PostgreSQL PassTheHash Protocol Design Weakness Detected - vulnerability
Next
From: Amit Langote
Date:
Subject: Re: posgres 12 bug (partitioned table)