CVE-2023-1907 — Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

CVE-2023-1907

Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session PUBLISHED

Description (CNA)

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.

Affected (CNA)

Vendor / product	Versions
Not supplied / Not supplied	affected 0 before 7.0

CWE

CWE-488

References

https://access.redhat.com/security/cve/CVE-2023-1907
https://bugzilla.redhat.com/show_bug.cgi?id=2218384

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.