BaseFortify

Publication date: 2025-11-13

Last updated on: 2025-11-19

Assigner: PostgreSQL

Description

pgAdmin <= 9.9 is affected by a vulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-13

Last Modified

2025-11-19

Generated

2026-07-06

AI Q&A

2025-11-13

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12765

EUVD

EUVD-2025-169293

Affected Vendors & Products

Vendor	Product	Version / Range
pgadmin	pgadmin_4	to 9.10 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-295	The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

Executive Summary

This vulnerability affects pgAdmin versions up to 9.9 and involves the LDAP authentication mechanism. It allows an attacker to bypass TLS certificate verification, which means the system may accept an untrusted or malicious certificate during LDAP authentication.

Impact Analysis

By bypassing TLS certificate verification in LDAP authentication, an attacker could perform a man-in-the-middle attack, intercepting or manipulating authentication traffic. This could lead to unauthorized access or exposure of sensitive information.

Hi! I’m here to help you understand CVE-2025-12765. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70