description: A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption.
problem types: CWE-522 - Insufficiently Protected Credentials
affected:
{
vendor: n/a
product: postgresql
versions:
version: Affects v9.6 to v14, status: affected
}