Executive Summary

This vulnerability is due to the use of a vulnerable third-party component, specifically PostgreSQL version 10.x, within the AxxonSoft Axxon One 2.0.8 backend on Windows and Linux. It allows a remote attacker to exploit multiple known security issues in PostgreSQL 10.x to escalate privileges, execute arbitrary code, or cause a denial-of-service condition. These issues have been fixed in PostgreSQL version 17.4.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability can allow a remote attacker to gain higher privileges than intended, run malicious code on the affected system, or disrupt service availability by causing denial-of-service. This can lead to unauthorized access, data compromise, or system downtime.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, upgrade PostgreSQL to version 17.4 or later, as this version resolves the multiple known CVEs present in PostgreSQL v10.x that are exploited in this vulnerability.

Useful 0 Not Useful 0