vulnerability

FreeBSD: VID-2a220a73-4759-11f0-a44a-6cc21735f730 (CVE-2025-49146): PostgreSQL JDBC library -- Improper Authentication

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:P/A:N)
Published
Jun 12, 2025
Added
Jun 14, 2025
Modified
Dec 10, 2025

Description

PostgreSQL JDBC Driver project reports: Client Allows Fallback to Insecure Authentication Despite channelBinding=require configuration. Fix channel binding required handling to reject non-SASL authentication Previously, when channel binding was set to "require", the driver would silently ignore this requirement for non-SASL authentication methods. This could lead to a false sense of security when channel binding was explicitly requested but not actually enforced. The fix ensures that when channel binding is set to "require", the driver will reject connections that use non-SASL authentication methods or when SASL authentication has not completed properly.

Solution

freebsd-upgrade-package-postgresql-jdbc
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.