high7.5
CVE-2021-31671
pgsync before 0.6.7 is affected by Information Disclosure of sensitive information.
Impact
pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pgsync Project | Pgsync | before 0.6.7 |