CVE-2026-54711

2.4 Faible

Publiée le 23/10/2026 à 15:17 · Modifiée le 23/10/2026 à 15:17 · Reçue · Source : security-advisories@github.com

Description

pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. Prior to version 2.7.1, when using .pgpass, database connection information including the username and password will be logged at the debug level. This issue has been patched in version 2.7.1.

Traduire en français

Produits concernés

Aiven-Open pghoard

Scores CVSS

Version	Score	Source	Vecteur
4.0	2.4 Faible	security-advisories@github.com	`CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`

Faiblesses (CWE)

CWE-532

Références

https://github.com/Aiven-Open/pghoard/releases/tag/2.7.1
https://github.com/Aiven-Open/pghoard/security/advisories/GHSA-mpx4-jmpr-vm8v

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories