CVE-2024-45624: Pgpool Pgpool-Ii

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved.

Affected products

• Pgpool Pgpool-Ii: from 3.2.0, up to and including 4.5.3
• Pgpool Global Development Group Pgpool-Ii

Published 2024-09-12. Last modified 2026-06-17.