{"metadata": {"vulnerability": "cve-2025-22248", "count": 17, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 8}}, "data": [{"timestamp": "2025-01-02T04:30:19.929Z", "date_only": false, "value": "2025-01-02T04:30:19.929Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-22248", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-05-13T07:30:00Z", "date_only": false, "value": "2025-05-13T07:30:00.000Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGPOOL-2025-22248", "record": "BIT-PGPOOL-2025-22248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-05-13T07:30:00Z", "date_only": false, "value": "2025-05-13T07:30:00.000Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PGPOOL-2025-22248", "record": "BIT-PGPOOL-2025-22248", "field": "modified", "linked_record": true}, {"timestamp": "2025-05-13T08:09:00Z", "date_only": false, "value": "2025-05-13T08:09:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / vmware", "record": "cve-2025-22248", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-13T09:13:30.613Z", "date_only": false, "value": "2025-05-13T09:13:30.613Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-22248", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-05-13T09:13:30.613Z", "date_only": false, "value": "2025-05-13T09:13:30.613Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / vmware", "record": "cve-2025-22248", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-13T09:30:38Z", "date_only": false, "value": "2025-05-13T09:30:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16090", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "23679f61-5bca-4430-8cd3-515e95f3d024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22248\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The bitnami/pgpool\u00a0Docker image, and the bitnami/postgres-ha\u00a0k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster.\u00a0The PGPOOL_SR_CHECK_USER\u00a0is the user that Pgpool itself uses to perform streaming replication checks against nodes, and should not be at trust\u00a0level. This allows to log into a PostgreSQL database using the repgmr\u00a0user without authentication. If Pgpool is exposed externally, a potential attacker could use this user to get access to the service. This is also present within the bitnami/postgres-ha\u00a0Kubernetes Helm chart.\n\ud83d\udccf Published: 2025-05-13T09:13:30.613Z\n\ud83d\udccf Modified: 2025-05-13T09:13:30.613Z\n\ud83d\udd17 References:\n1. https://github.com/bitnami/charts/security/advisories/GHSA-mx38-x658-5fwj", "url": "https://t.me/DarkWebInformer_CVEAlerts/16090", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-05-13T10:15:22.600Z", "date_only": false, "value": "2025-05-13T10:15:22.600", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-22248", "record": "FKIE_CVE-2025-22248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-05-13T12:22:50.164Z", "date_only": false, "value": "2025-05-13T12:22:50.164109Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114500499510580526", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "0898bfa5-6b2f-4eb7-b503-aebbc464b053", "url": "https://infosec.exchange/users/cR0w/statuses/114500499510580526"}, {"timestamp": "2025-05-13T13:10:00.979Z", "date_only": false, "value": "2025-05-13T13:10:00.979591Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-22248", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-05-13T13:10:00.979Z", "date_only": false, "value": "2025-05-13T13:10:00.979591Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-22248", "record": "FKIE_CVE-2025-22248", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-05-13T13:10:31.070Z", "date_only": false, "value": "2025-05-13T13:10:31.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-22248", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-13T13:10:31.070Z", "date_only": false, "value": "2025-05-13T13:10:31.070Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-22248", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-14T08:12:32.069Z", "date_only": false, "value": "2025-05-14T08:12:32.069809Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lp4ki6p6hs24", "record": "cve-2025-22248", "field": "creation_timestamp", "uuid": "a2a2ce18-a4d3-4fc4-8a1c-e285763d7045", "url": "https://bsky.app/profile/shiojiri.com/post/3lp4ki6p6hs24"}, {"timestamp": "2025-05-14T11:38:58Z", "date_only": false, "value": "2025-05-14T11:38:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3264", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "b41551e7-dc19-45aa-96db-3e0d1c0f2c2a", "content": "\u26a1\ufe0fCritical Misconfiguration in Bitnami Pgpool Enables Unauthenticated PostgreSQL Access (CVE-2025-22248).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3264"}, {"timestamp": "2025-05-15T14:19:00.657Z", "date_only": false, "value": "2025-05-15T14:19:00.657494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lp7pggsshh2e", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "2d05c894-b0b5-4bff-87d6-6c1756c1add4", "url": "https://bsky.app/profile/bluesky.awakari.com/post/3lp7pggsshh2e"}, {"timestamp": "2026-06-17T08:45:54.693Z", "date_only": false, "value": "2026-06-17T08:45:54.693", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-22248", "record": "FKIE_CVE-2025-22248", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T08:42:20.277Z", "anchors": {"origin": {"timestamp": "2025-05-13T07:30:00Z", "date_only": false, "value": "2025-05-13T07:30:00.000Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGPOOL-2025-22248", "record": "BIT-PGPOOL-2025-22248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-05-13T07:30:00Z", "date_only": false, "value": "2025-05-13T07:30:00.000Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGPOOL-2025-22248", "record": "BIT-PGPOOL-2025-22248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "exploit_publication": {"timestamp": "2025-05-13T09:30:38Z", "date_only": false, "value": "2025-05-13T09:30:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16090", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "23679f61-5bca-4430-8cd3-515e95f3d024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22248\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The bitnami/pgpool\u00a0Docker image, and the bitnami/postgres-ha\u00a0k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster.\u00a0The PGPOOL_SR_CHECK_USER\u00a0is the user that Pgpool itself uses to perform streaming replication checks against nodes, and should not be at trust\u00a0level. This allows to log into a PostgreSQL database using the repgmr\u00a0user without authentication. If Pgpool is exposed externally, a potential attacker could use this user to get access to the service. This is also present within the bitnami/postgres-ha\u00a0Kubernetes Helm chart.\n\ud83d\udccf Published: 2025-05-13T09:13:30.613Z\n\ud83d\udccf Modified: 2025-05-13T09:13:30.613Z\n\ud83d\udd17 References:\n1. https://github.com/bitnami/charts/security/advisories/GHSA-mx38-x658-5fwj", "url": "https://t.me/DarkWebInformer_CVEAlerts/16090", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 7238.0, "hours": 2.0105555555555554, "days": 0.08377314814814815, "min_seconds": 7238.0, "max_seconds": 7238.0, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-13T07:30:00Z", "date_only": false, "value": "2025-05-13T07:30:00.000Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGPOOL-2025-22248", "record": "BIT-PGPOOL-2025-22248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2025-05-13T09:30:38Z", "date_only": false, "value": "2025-05-13T09:30:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16090", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "23679f61-5bca-4430-8cd3-515e95f3d024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22248\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The bitnami/pgpool\u00a0Docker image, and the bitnami/postgres-ha\u00a0k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster.\u00a0The PGPOOL_SR_CHECK_USER\u00a0is the user that Pgpool itself uses to perform streaming replication checks against nodes, and should not be at trust\u00a0level. This allows to log into a PostgreSQL database using the repgmr\u00a0user without authentication. If Pgpool is exposed externally, a potential attacker could use this user to get access to the service. This is also present within the bitnami/postgres-ha\u00a0Kubernetes Helm chart.\n\ud83d\udccf Published: 2025-05-13T09:13:30.613Z\n\ud83d\udccf Modified: 2025-05-13T09:13:30.613Z\n\ud83d\udd17 References:\n1. https://github.com/bitnami/charts/security/advisories/GHSA-mx38-x658-5fwj", "url": "https://t.me/DarkWebInformer_CVEAlerts/16090", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 47005940.277015, "hours": 13057.205632504167, "days": 544.0502346876737, "min_seconds": 47005940.277015, "max_seconds": 47005940.277015, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-13T07:30:00Z", "date_only": false, "value": "2025-05-13T07:30:00.000Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PGPOOL-2025-22248", "record": "BIT-PGPOOL-2025-22248", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, "end": {"timestamp": "2026-11-08T08:42:20.277Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 46998702.277015, "hours": 13055.195076948612, "days": 543.9664615395254, "min_seconds": 46998702.277015, "max_seconds": 46998702.277015, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-05-13T09:30:38Z", "date_only": false, "value": "2025-05-13T09:30:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16090", "record": "CVE-2025-22248", "field": "creation_timestamp", "uuid": "23679f61-5bca-4430-8cd3-515e95f3d024", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22248\n\ud83d\udd25 CVSS Score: 9.4 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: The bitnami/pgpool\u00a0Docker image, and the bitnami/postgres-ha\u00a0k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster.\u00a0The PGPOOL_SR_CHECK_USER\u00a0is the user that Pgpool itself uses to perform streaming replication checks against nodes, and should not be at trust\u00a0level. This allows to log into a PostgreSQL database using the repgmr\u00a0user without authentication. If Pgpool is exposed externally, a potential attacker could use this user to get access to the service. This is also present within the bitnami/postgres-ha\u00a0Kubernetes Helm chart.\n\ud83d\udccf Published: 2025-05-13T09:13:30.613Z\n\ud83d\udccf Modified: 2025-05-13T09:13:30.613Z\n\ud83d\udd17 References:\n1. https://github.com/bitnami/charts/security/advisories/GHSA-mx38-x658-5fwj", "url": "https://t.me/DarkWebInformer_CVEAlerts/16090", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-08T08:42:20.277Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}