Information Disclosure in pgsync before 0.6.7 due to mishandling of schema syncing options

CVE-2021-31671 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Learn more about our Web Application Penetration Testing UK.