GitHub Advisoryadvisory · RubyGems

GHSA-72rj-36qc-47g7 Pgsync Contains Cleartext Transmission of Sensitive Information

HIGH Published 2021-04-27 Modified 2023-08-25 Official page ↗
Aliases
CVE-2021-31671
Ecosystem
RubyGems
Packages
pgsync
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-319
Reviewed
2021-04-27

Affected packages

• RubyGems pgsync: < 0.6.7 → fixed in 0.6.7

Description

pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the `--schema-first` and `--schema-only` options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.

Related

Alias · CVE (1)

  • CVE-2021-31671 pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. vulnerability

Weakness · CWE (1)

  • CWE-319 Cleartext Transmission of Sensitive Information weakness

References