pgAgent Temporary Directory Predictability Vulnerability Allowing Job Disruption

A vulnerability in pgAgent versions prior to 4.2.3 allows local attackers to disrupt scheduled tasks by pre-creating directories used for executing batch job scripts. The issue arises from the use of a poorly seeded random number generator for directory name generation, which creates a window of opportunity for interference.

Impact

Exploitation of this vulnerability can lead to disruption of scheduled tasks by preventing pgAgent from executing jobs.

Remediation

Users can upgrade to pgAgent version 4.2.3 or later to address this vulnerability.