Approved changes feed: RSS · Atom
cpe:2.3:a:pgadmin:pgagent:*:*:*:*:*:postgresql:*:*
part: a version: * update: *
| Vendor | Pgadmin (7b0eac40-34ec-5c7c-ab30-f64b5bcb1271) |
|---|---|
| Product | Pgagent (695dda6a-30c1-5f7b-b6f9-b9c71cc700e1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | postgresql |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pgadmin-org/pgagent |
purl2cpe | 2026-06-01 10:14:56.736798 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0218 |
vulnerable | 2026-06-08 07:02:23.950452 |
pgAgent scheduled batch job scripts are created in a predictable temporary directory potentially allowing a denial of service
MEDIUM (5.5)
When batch jobs are executed by pgAgent, a script is created in a temporary directory and then executed. In versions of pgAgent prior to 4.2.3, an insufficiently seeded random number generator is used when generating the directory name, leading to the possibility for a local attacker to pre-create the directory and thus prevent pgAgent from executing jobs, disrupting scheduled tasks.
Published: 2025-01-07T19:18:02.865Z
Updated: 2025-11-03T17:31:33.459Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.