GitHub Advisoryadvisory · PyPI

GHSA-2mvc-557g-5638 pgAdmin is affected by a multi-factor authentication bypass vulnerability

MEDIUM Published 2024-05-02 Modified 2025-09-19 Official page ↗
Aliases
CVE-2024-4215
Ecosystem
PyPI
Packages
pgadmin4
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-89
Reviewed
2024-05-03

Affected packages

• PyPI pgadmin4: < 8.6 → fixed in 8.6

Description

pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account’s username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account’s MFA enrollment status.

Related

Alias · CVE (1)

  • CVE-2024-4215 pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References