Threats tagged 'ghsa-ccch-g55g-pm23'

PostgreSQL restricts access to the salt and shift parameters via the SHOW command for users who are not members of the pg_read_all_settings role. However, these sensitive values remain visible in the pg_db_role_setting or pg_roles tables if set at the database or user level. The PostgreSQL Anonymizer documentation recommends setting the salt using ALTER DATABASE or ALTER ROLE commands. This issue is resolved in PostgreSQL Anonymizer version 3.3.0 and later.