CVE record · 1 source
CVE-2026-116244
CVSS 8.2When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the…
- Vendor
- Pgadmin.Org
- Product
- pgAdmin 4
- CVSS v3.1
- 8.2 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
- EPSS
- 0.003 (p20)
- Weakness
- CWE-522, CWE-1188
- Exposure class
- Identity
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the…
When a pgAdmin 4 connection was not meant to use a Kerberos user's delegated credentials, pgAdmin removed KRB5CCNAME from its environment, so the Kerberos library fell back to the default credential cache, or a client keytab, of…