CVE-2020-25694

score

<0.1

cvss

8.1

epss

1.6%

published

2020-11-16

kev added

—

first seen

2026-10-21

PostgreSQL versions before 13.1, 12.5, 11.10, 10.15, 9.6.20, and 9.5.24 contain a man-in-the-middle and information disclosure vulnerability caused by reusing connection parameters without security-relevant parameters, letting attackers observe clear-text transmissions, exploit requires client application to reuse connection parameters.