AxxonSoft Axxon One PostgreSQL Dependency Vulnerability Allowing Privilege Escalation and Code Execution

A vulnerability exists in AxxonSoft Axxon One versions 2.0.8 and earlier, on both Windows and Linux, due to a reliance on a vulnerable third-party component in the PostgreSQL backend. This flaw enables remote attackers to escalate privileges, execute arbitrary code, or cause a denial-of-service by exploiting multiple known vulnerabilities in PostgreSQL version 10.x, which have been addressed in PostgreSQL 17.4.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, execution of arbitrary code, or a denial-of-service condition.

Remediation

Users are advised to upgrade to Axxon One version 2.0.8 or later and to update PostgreSQL to version 17.4. For those using external PostgreSQL instances, it is strongly recommended to update to version 17.4 or newer.