Databases & cachesTCP 5432 Encrypted
Port 5432: PostgreSQL
PostgreSQL
Default port for PostgreSQL.
How attackers abuse it
- Over-permissive host-based access rules (trust authentication).
- Exposure to the internet.
How to defend it
- Restrict pg_hba.conf to specific hosts with password or certificate auth.
- Require TLS.
Exam tip
'trust' authentication in pg_hba.conf means no password at all.