What is the CVSS score of CVE-2023-1907?

CVE-2023-1907 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Pgadmin are affected by CVE-2023-1907?

Organizations using A vulnerability face notable risk from CVE-2023-1907 rated CVSS 8.0.. A patch is available.

How to fix or mitigate CVE-2023-1907?

Within 30 days: Identify all affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Pgadmin CVE-2023-1907

HIGH

Exposure of Data Element to Wrong Session (CWE-488)

2025-01-09 secalert@redhat.com

Information Disclosure Pgadmin Suse

8.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

SUSE

7.5 HIGH

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 28, 2026 - 18:02 vuln.today

CVE Published

Jan 09, 2025 - 08:15 nvd

HIGH 8.0

DescriptionCVE.org

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously.

AnalysisAI

A vulnerability was found in pgadmin. Rated high severity (CVSS 8.0), this vulnerability is remotely exploitable.

Technical ContextAI

This vulnerability is classified under CWE-488. A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously. Affected products include: Pgadmin.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

Same weakness CWE-488 – Exposure of Data Element to Wrong Session

View all

CVE-2024-38367 CRITICAL POC

9.6

CVE-2024-27935 HIGH POC

8.3

CVE-2024-7049 MEDIUM POC

5.4

CVE-2024-27455 CRITICAL

9.1

8.3

7.5

7.5

7.5

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

SUSE

Severity: High

Product	Status
SUSE Enterprise Storage 7.1	Fixed
SUSE Linux Enterprise Desktop 15 SP6 SUSE Linux Enterprise High Performance Computing 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Fixed

CVE-2023-1907 vulnerability details – vuln.today

Back

Pgadmin CVE-2023-1907

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-488 – Exposure of Data Element to Wrong Session

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code