CVE-2018-1053

CVE-2018-1053 is a vulnerability in PostgreSQL versions 9.3 through 10.2 where the pg_upgrade utility creates a temporary file containing database passwords with insecure permissions. This flaw allows an authenticated attacker to read or modify this file, potentially exposing sensitive credentials. The vulnerability has a CVSS score of 7.0 (High) due to its high impact on confidentiality, integrity, and availability, though it requires local access and high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.