CVE-2023-31043

—

CVSS 3.1

7.5 high

EPSS

<1%p36

Published

Apr 23, 2023 (Apr 23, 2023)

Modified

Jun 17, 2026

Description

EnterpriseDB EDB Postgres Advanced Server (EPAS) before 14.6.0 logs unredacted passwords in situations where optional parameters are used with CREATE/ALTER USER/GROUP/ROLE, and redacting was configured with edb_filter_log.redact_password_commands. The fixed versions are 10.23.33, 11.18.29, 12.13.17, 13.9.13, and 14.6.0.

Vendors: enterprisedb
Products: postgres advanced server
Weakness: CWE-312, CWE-521
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.