Threats tagged 'ghsa-hp2m-55fj-8mw5'

A vulnerability in PostgreSQL SCRAM authentication allows an unauthenticated attacker to test whether a user exists by observing differences in the SCRAM iteration count in authentication responses. This affects PostgreSQL major versions 16 through 18, specifically versions before 16.15, 17.11, and 18.5. Versions prior to 16 are not affected.