CVE-2023-1907: Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session
A vulnerability was found in pgadmin, where users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.
Other sources
A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-1907?
CVE-2023-1907 has been classified as a medium severity vulnerability.
How do I fix CVE-2023-1907?
To fix CVE-2023-1907, upgrade pgAdmin4 to version 7.0 or later.
What impact does CVE-2023-1907 have on users?
CVE-2023-1907 allows users to potentially be attached to another user's session if multiple login attempts occur simultaneously.
Who is affected by CVE-2023-1907?
CVE-2023-1907 affects users of pgAdmin running in server mode with LDAP authentication up to version 7.0.
Is CVE-2023-1907 related to other vulnerabilities?
CVE-2023-1907 should be reviewed in the context of session management vulnerabilities in web applications.