CVE-2024-4215 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-4215 Interim 1 13 2025-08-06T01:03:50Z current 2024-05-03T23:11:44Z 2025-08-06T01:03:50Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-4215 pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account's username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account's MFA enrollment status. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2024-July/035793.html E-Mail link for SUSE-SU-2024:2260-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP6 SUSE Linux Enterprise Module for Python 3 15 SP7 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed pgadmin4 pgadmin4-8.5-150600.3.3.1 pgadmin4-8.8-1.1 pgadmin4-cloud-8.5-150600.3.3.1 pgadmin4-cloud-8.8-1.1 pgadmin4-desktop-8.5-150600.3.3.1 pgadmin4-desktop-8.8-1.1 pgadmin4-doc pgadmin4-doc-8.5-150600.3.3.1 pgadmin4-doc-8.8-1.1 pgadmin4-web pgadmin4-web-uwsgi pgadmin4-web-uwsgi-8.5-150600.3.3.1 pgadmin4-web-uwsgi-8.8-1.1 system-user-pgadmin system-user-pgadmin-8.5-150600.3.3.1 system-user-pgadmin-8.8-1.1 pgadmin4-8.5-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-doc-8.5-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 system-user-pgadmin-8.5-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-8.5-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-doc-8.5-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 system-user-pgadmin-8.5-150600.3.3.1 as a component of SUSE Linux Enterprise Module for Python 3 15 SP7 pgadmin4-8.5-150600.3.3.1 as a component of openSUSE Leap 15.6 pgadmin4-cloud-8.5-150600.3.3.1 as a component of openSUSE Leap 15.6 pgadmin4-desktop-8.5-150600.3.3.1 as a component of openSUSE Leap 15.6 pgadmin4-doc-8.5-150600.3.3.1 as a component of openSUSE Leap 15.6 pgadmin4-web-uwsgi-8.5-150600.3.3.1 as a component of openSUSE Leap 15.6 system-user-pgadmin-8.5-150600.3.3.1 as a component of openSUSE Leap 15.6 pgadmin4-8.8-1.1 as a component of openSUSE Tumbleweed pgadmin4-cloud-8.8-1.1 as a component of openSUSE Tumbleweed pgadmin4-desktop-8.8-1.1 as a component of openSUSE Tumbleweed pgadmin4-doc-8.8-1.1 as a component of openSUSE Tumbleweed pgadmin4-web-uwsgi-8.8-1.1 as a component of openSUSE Tumbleweed system-user-pgadmin-8.8-1.1 as a component of openSUSE Tumbleweed pgadmin4 as a component of SUSE Enterprise Storage 7.1 pgadmin4-doc as a component of SUSE Enterprise Storage 7.1 pgadmin4-web as a component of SUSE Enterprise Storage 7.1 pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS pgadmin4 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4-web as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 system-user-pgadmin as a component of SUSE Linux Enterprise Module for Python 3 15 SP6 pgadmin4 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-doc as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4-web as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP1-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP2-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP3-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-doc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4-web as a component of SUSE Linux Enterprise Server 15 SP4-LTSS pgadmin4 as a component of SUSE Linux Enterprise Server Teradata 15 SP4 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 pgadmin4 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-doc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4-web as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 pgadmin4 as a component of SUSE Manager Proxy 4.3 pgadmin4-doc as a component of SUSE Manager Proxy 4.3 pgadmin4-web as a component of SUSE Manager Proxy 4.3 pgadmin4 as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-doc as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4-web as a component of SUSE Manager Retail Branch Server 4.3 pgadmin4 as a component of SUSE Manager Server 4.3 pgadmin4-doc as a component of SUSE Manager Server 4.3 pgadmin4-web as a component of SUSE Manager Server 4.3 pgadmin4 as a component of openSUSE Leap 15.5 pgadmin4-doc as a component of openSUSE Leap 15.5 pgadmin4-web as a component of openSUSE Leap 15.5 pgadmin4-web-uwsgi as a component of openSUSE Leap 15.5 pgAdmin <= 8.5 is affected by a multi-factor authentication bypass vulnerability. This vulnerability allows an attacker with knowledge of a legitimate account's username and password may authenticate to the application and perform sensitive actions within the application, such as managing files and executing SQL queries, regardless of the account's MFA enrollment status. CVE-2024-4215 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:pgadmin4-cloud-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:pgadmin4-desktop-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:pgadmin4-web-uwsgi-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-doc-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP6:system-user-pgadmin-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP7:pgadmin4-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP7:pgadmin4-doc-8.5-150600.3.3.1 SUSE Linux Enterprise Module for Python 3 15 SP7:system-user-pgadmin-8.5-150600.3.3.1 openSUSE Leap 15.6:pgadmin4-8.5-150600.3.3.1 openSUSE Leap 15.6:pgadmin4-cloud-8.5-150600.3.3.1 openSUSE Leap 15.6:pgadmin4-desktop-8.5-150600.3.3.1 openSUSE Leap 15.6:pgadmin4-doc-8.5-150600.3.3.1 openSUSE Leap 15.6:pgadmin4-web-uwsgi-8.5-150600.3.3.1 openSUSE Leap 15.6:system-user-pgadmin-8.5-150600.3.3.1 openSUSE Tumbleweed:pgadmin4-8.8-1.1 openSUSE Tumbleweed:pgadmin4-cloud-8.8-1.1 openSUSE Tumbleweed:pgadmin4-desktop-8.8-1.1 openSUSE Tumbleweed:pgadmin4-doc-8.8-1.1 openSUSE Tumbleweed:pgadmin4-web-uwsgi-8.8-1.1 openSUSE Tumbleweed:system-user-pgadmin-8.8-1.1 SUSE Enterprise Storage 7.1:pgadmin4 SUSE Enterprise Storage 7.1:pgadmin4-doc SUSE Enterprise Storage 7.1:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:pgadmin4-web SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-doc SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:pgadmin4-web SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4 SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-doc SUSE Linux Enterprise Module for Python 3 15 SP6:pgadmin4-web SUSE Linux Enterprise Module for Python 3 15 SP6:system-user-pgadmin SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4 SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-doc SUSE Linux Enterprise Module for Server Applications 15 SP5:pgadmin4-web SUSE Linux Enterprise Server 15 SP1-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP1-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP1-LTSS:pgadmin4-web SUSE Linux Enterprise Server 15 SP2-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP2-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP2-LTSS:pgadmin4-web SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP3-LTSS:pgadmin4-web SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4 SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-doc SUSE Linux Enterprise Server 15 SP4-LTSS:pgadmin4-web SUSE Linux Enterprise Server Teradata 15 SP4:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP2:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP2:pgadmin4-doc SUSE Linux Enterprise Server for SAP Applications 15 SP2:pgadmin4-web SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-doc SUSE Linux Enterprise Server for SAP Applications 15 SP3:pgadmin4-web SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4 SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-doc SUSE Linux Enterprise Server for SAP Applications 15 SP4:pgadmin4-web SUSE Manager Proxy 4.3:pgadmin4 SUSE Manager Proxy 4.3:pgadmin4-doc SUSE Manager Proxy 4.3:pgadmin4-web SUSE Manager Retail Branch Server 4.3:pgadmin4 SUSE Manager Retail Branch Server 4.3:pgadmin4-doc SUSE Manager Retail Branch Server 4.3:pgadmin4-web SUSE Manager Server 4.3:pgadmin4 SUSE Manager Server 4.3:pgadmin4-doc SUSE Manager Server 4.3:pgadmin4-web openSUSE Leap 15.5:pgadmin4 openSUSE Leap 15.5:pgadmin4-doc openSUSE Leap 15.5:pgadmin4-web openSUSE Leap 15.5:pgadmin4-web-uwsgi important 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H