CVE-2021-43767

score

<0.1

cvss

5.9

epss

0.4%

published

2022-08-25

kev added

—

first seen

2026-10-21

Odyssey, when configured with PostgreSQL using 'trust' authentication with 'clientcert' requirement or 'cert' authentication, passes unencrypted bytes to client, letting man-in-the-middle attackers inject false responses, exploit requires man-in-the-middle position.