CVE-2015-6817: Pgbouncer

High severity, CVSS 8.1. EPSS: 2.2% chance of exploitation in the next 30 days.

PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user via an unknown username.

Affected products

• Pgbouncer Pgbouncer: version 1.6 only

Published 2017-05-23. Last modified 2026-06-17.