CVE-2023-1907 HIGH

CVE-2023-1907: Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session

Weakness CWE-488

Published January 9, 2025

Last update August 27, 2025

View on NVD All CVEs

CVSS base score

8.0/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.

Key dates

02Disclosure timeline

January 9, 2025 CVE published

August 27, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-1907 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/488.html

Related vulnerabilities

04Related CVE

CVE-2026-23919 Insufficient isolation of JavaScript (Duktape) execution context on Zabbix Server CVE-2026-34391 Fleet Vulnerable to Windows MDM cross-device command disclosure CVE-2024-11094 404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure CVE-2026-27492 Lettermint Node.js SDK leaks email properties to unintended recipients when client instance is reused CVE-2024-6162 Undertow: url-encoded request path information can be broken on ajp-listener