BUG #16682: The pg_user_mapping table saves the plaintext password
| От | PG Bug reporting form |
|---|---|
| Тема | BUG #16682: The pg_user_mapping table saves the plaintext password |
| Дата | |
| Msg-id | 16682-89078b97ed03d74b@postgresql.org обсуждение исходный текст |
| Ответы |
Re: BUG #16682: The pg_user_mapping table saves the plaintext password
|
| Список | pgsql-bugs |
The following bug has been logged on the website: Bug reference: 16682 Logged by: yi Ding Email address: abcxiaod@126.com PostgreSQL version: 12.0 Operating system: linux Description: The pg_user_mapping table saves the user name and password information of the external database, which is used to remotely connect to the external database from the local database and access the tables on the external database. When running the connection program, the user name and password for accessing the external database will be obtained from the pg_user_mapping table, and the external database will be accessed as a client. If the user name and password are verified, the connection is completed, and if the verification fails, the connection cannot be made. Whether the plaintext password in this system table system view has security risks, is it considered a security vulnerability?
В списке pgsql-bugs по дате отправления: