Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6xww-rmpp-rhm3

Опубликовано: 12 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.

EPSS

Процентиль: 41%
0.00188
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-208

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.

EPSS

Процентиль: 41%
0.00188
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-208