Threats tagged 'ghsa-rvv3-vcvv-5fqj'

psqlODBC on Unix-like systems, when logging is enabled, creates log files in /tmp with default world-readable permissions and predictable names. This allows local users to read sensitive query data from other users' logs and to exploit symbolic links to append log data to arbitrary files with victim privileges. Versions before 18.00.0006 are affected.