Authentication Bypass Vulnerability in PgBouncer 1.6.x

Authentication Bypass Vulnerability in PgBouncer 1.6.x

CVE-2015-6817 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown username.

Learn more about our User Device Pen Test.