A flaw was found in Pgpool-II. The application writes sensitive cluster details directly into log files. An authenticated attacker can exploit this issue to view database cluster information, resulting in unauthorized information disclosure.
Last checked: 2026-09-30 19:21 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-30 16:58 UTC)
Fix evidence last checked: 2026-10-01 17:23 UTC