From: MUKESH PRASAD <mukeshprasad_hit@yahoo.co.in>
To: Geoff Winkless <pgsqladmin@geoff.dj>
To: pgsql-admin@lists.postgresql.org <pgsql-admin@lists.postgresql.org>
Subject: Re: The default database account can be accessed without a password
Date: Tue, 22 Sep 2020 14:07:40 +0000 (UTC)
Message-ID: <634841077.3807388.1600783660380@mail.yahoo.com> (raw)
In-Reply-To: <CAEzk6fdc+HuRj6AWObaaLf6bwmR-CqP2H0MTbgnSTvhYnwomow@mail.gmail.com>
References: <784638453.3796012.1600781634382.ref@mail.yahoo.com>
<784638453.3796012.1600781634382@mail.yahoo.com>
<CAEzk6fdc+HuRj6AWObaaLf6bwmR-CqP2H0MTbgnSTvhYnwomow@mail.gmail.com>
Hi Geoff, Yes it is allowed for all the hosts in same subnet.
host all all 10.10.10.0/24 trust
Regards,Mukesh Prasad
Sent from Yahoo Mail on Android
On Tue, 22 Sep 2020 at 7:10 PM, Geoff Winkless<pgsqladmin@geoff.dj> wrote: On Tue, 22 Sep 2020 at 14:33, MUKESH PRASAD
<mukeshprasad_hit@yahoo.co.in> wrote:
> I am getting VA with CVE I'd 1999-0508 where it says my default database is unpassword. However I checked all the dB with \l command and In none of the database I am able to login without password.
>
> It refers to the default postgres user and I have changed password too multiple times but still it complaints.
Do you have "trust" for any lines in pg_hba.conf?
Geoff
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-admin@postgresql.org
Cc: mukeshprasad_hit@yahoo.co.in, pgsqladmin@geoff.dj, pgsql-admin@lists.postgresql.org
Subject: Re: The default database account can be accessed without a password
In-Reply-To: <634841077.3807388.1600783660380@mail.yahoo.com>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox