Re: BUG #16580: PostgreSQL PassTheHash Protocol Design Weakness Detected - vulnerability

Greetings,

* PG Bug reporting form (noreply@postgresql.org) wrote:
> PostgreSQL PassTheHash Protocol Design Weakness Detected - this is the
> vulnerability detected by our internal scan tool 'qualys'.
> Could you please help us understand and remediate the solution for this
> vulnerability.

Use SCRAM.

> We have 4 environments in total and only 1 env has postgres and other 3 have
> MySQL. Why do we see this vulnerability in all 4 environments, even in the
> env's where postgres isn't there. Please advise.

... no idea.

Thanks,

Stephen