laptop and a wrench

漏洞

Updating the Database Admin User's password with some combinations which include the special character '+' succeeds but breaks the relational data store

ArcGIS GIS Server
漏洞 ID 编号 BUG-000168218
已提交June 10, 2024
上次修改时间January 26, 2025
适用范围ArcGIS GIS Server
找到的版本10.9.1
操作系统Windows Server
操作系统版本2022
状态In Review

解决办法

The problematic Database Admin User password can be updated to a working password by temporarily using Postgres Trust Authentication: PostgreSQL: Documentation: 16: 21.4. Trust Authentication

  1. On the ArcGIS Data Store machine, navigate to the Data Store's pg_hba.conf file (i.e. C:\arcgisdatastore\pgdata\pg_hba.conf).
  2. Take a backup of pg_hba.conf (i.e. create a copy of this file and rename with .bak extension, pg_hba.conf.bak).
  3. Edit the pg_hba.conf file to add the following line/value at the uppermost position:
    1. hostssl   all   all   127.0.0.1/32   trust
    2. image.png
      1. This entry specifically allows for local connections to be made to postgres using whichever database username is specified. In other words, this entry will allow connection to postgres as the Database Admin User while ignoring (and thus overcoming) the problematic password. For more information, see PostgreSQL: Documentation: 16: 21.4. Trust Authentication.
  4. Save the pg_hba.conf file.
  5. Using Data Store ArcGIS Data Store command utility reference—Portal for ArcGIS | Documentation for ArcGIS Enterprise, and execute listadminusers. This will now succeed, and the Database Admin User username and password will now be displayed. Note the Database Admin User (i.e. adm_2ztay).
    1. image.png
  6. Using Data Store ArcGIS Data Store command utility reference—Portal for ArcGIS | Documentation for ArcGIS Enterprise, execute changepassword for the Database Admin User, while specifying a password that we do not expect to be problematic (i.e. potato). Once completed, execute listadminusers to verify the password has been changed successfully.
    1. image.png
  7. Revert the Data Store pg_hba.conf file to it's original state, or to the backup copy.
    1. Note, this step is important to ensure the Data Store remains secure.

The Database Admin User should now be able to execute normal commands and functionality should be restored.

重现步骤

漏洞 ID: BUG-000168218

软件:

  • ArcGIS GIS Server

当漏洞状态发生变化时获得通知

下载 Esri 支持应用程序

发现关于本主题的更多内容

获取来自 ArcGIS 专家的帮助

联系技术支持部门

下载 Esri 支持应用程序

转至下载选项