broadcom bitnami/pgpool vulnerabilities (CVE)

CVE records published for broadcom bitnami/pgpool, newest first. Follow to get an email when a new one appears.

1 results
9.4Critical
CVE-2025-22248

[pgpool] Unauthenticated access to postgres through pgpool

VMware Bitnami

The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOL_SR_CHECK_USER is the user that Pgpool itself us…