{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"EDB Postgres Advanced Server","vendor":"EnterpriseDB","versions":[{"lessThan":"15.7.0","status":"affected","version":"15.0","versionType":"custom"},{"lessThan":"16.3.0","status":"affected","version":"16.0","versionType":"custom"}]}],"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659"}],"cveTags":[],"descriptions":[{"lang":"en","value":"\nAll versions of EnterpriseDB Postgres Advanced Server (EPAS) from 15.0 prior to 15.7.0 and from 16.0 prior to 16.3.0 may allow users using edbldr to bypass role permissions from pg_read_server_files. This could allow low privilege users to read files to which they would not otherwise have access.\n\n"},{"lang":"es","value":"Todas las versiones de EnterpriseDB Postgres Advanced Server (EPAS) desde la 15.0 anterior a la 15.7.0 y desde la 16.0 anterior a la 16.3.0 pueden permitir a los usuarios que usan edbldr omitir los permisos de función de pg_read_server_files. Esto podría permitir a los usuarios con privilegios bajos leer archivos a los que de otro modo no tendrían acceso."}],"id":"CVE-2024-4545","lastModified":"2026-06-17T08:02:06.660","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":3.1,"impactScore":4.0,"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-4545","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-05-10T13:16:47.766868Z","version":"2.0.3"}}]},"published":"2024-05-14T15:44:02.793","references":[{"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","url":"https://www.enterprisedb.com/docs/epas/15/epas_rel_notes/"},{"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","url":"https://www.enterprisedb.com/docs/epas/latest/epas_rel_notes/"},{"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","url":"https://www.enterprisedb.com/docs/security/advisories/cve20244545/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.enterprisedb.com/docs/epas/15/epas_rel_notes/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.enterprisedb.com/docs/epas/latest/epas_rel_notes/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.enterprisedb.com/docs/security/advisories/cve20244545/"}],"sourceIdentifier":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-269"}],"source":"20be33e2-bf35-4d13-8fad-18bd2f3e3659","type":"Secondary"}]}