[BUGS] Re: BUG #14600: Passwords in user mappings leaked by psql \deu+command

Поиск
Список
Период
Сортировка
От Noah Misch
Тема [BUGS] Re: BUG #14600: Passwords in user mappings leaked by psql \deu+command
Дата
Msg-id 20170408193407.GA2814157@tornado.leadboat.com
обсуждение исходный текст
Список pgsql-bugs
On Wed, Mar 29, 2017 at 04:54:03PM +0200, Feike Steenbergen wrote:
> > If a standard user logs into Alice using command line client, psql, and
> runs
> > the command \deu+, the password for both the standard_user and the
> > power_user will be visible in the displayed user mapping.
> 
> \deu+ queries pg_catalog.pg_user_mappings, which itself is a view on top of
> pg_user_mapping.

Thanks for the report; the next back-branch releases will contain a fix.


-- 
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

В списке pgsql-bugs по дате отправления:

Предыдущее
От: Tom Lane
Дата:
Сообщение: Re: [BUGS] BUG #14614: Combination of UNION, EXCEPT and ORDER BY produces an error
Следующее
От: mustafa husny
Дата:
Сообщение: [BUGS] manage connections