Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
pgAdmin versions 8.11 and earlier are vulnerable to a security flaw in OAuth2 authentication. This vulnerability allows an attacker to potentially obtain the client ID and secret, leading to unauthorized access to user data.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
NØX Echo Lineage Signal: CVE-2024-9014 Entity: pgAdmin 4 Lineage: Public vulnerability → Public exploit/PoC → Observed exploitation Relationship: - pgAdmin 4 → CVE-2024-9014 → Evidence → Operational Risk Current State: DISCLOSED, POC_AVAILABLE, ACTIVE_EXPLOITATION
NØØT Security Alerts Classification: Critical CVE: CVE-2024-9014 Product: pgAdmin / pgAdmin 4 Summary: VulnCheck reports real-world exploitation activity affecting pgAdmin / pgAdmin 4. Evidence: Public PoC/exploit available; Active exploitation reported; Severe impact class; Live exploitation observed by VulnCheck canaries Impact: The vulnerability has a severe impact class such as code execution, authentication bypass, account takeover, or privilege escalation. Action: Prioritize vendor remediation, identify exposed affected systems, and investigate for evidence of exploitation when applicable. Date: 07 Oct 2024 Source: https://vulncheck.com/xdb/2c38d7a63880 #NØØT #CyberSecurity #InfoSec #ThreatIntelligence #CyberThreats #CVE #CyberDefense #pgAdmin_4 #CVE_2024_9014 #ActiveExploitation #Exploit
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | pgadmin | pgadmin_4 | - | postgresql | - |