CVE-2023-41313: Apache Doris: Timing Attack weakness

CVE-2023-41313: Apache Doris: Timing Attack weakness

Open Source Security [[{„value“:“

Posted by Mingyu Chen on Mar 10

Severity: important

Affected versions:

– Apache Doris before 1.2.8

Description:

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks.
Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.

Credit:

Andrea Cosentino from Apache Software Foundation (reporter)

References:

https://doris.apache.org
https://www.cve.org/CVERecord?id=CVE-2023-41313
„}]] Read More 

Schreibe einen Kommentar

Deine E-Mail-Adresse wird nicht veröffentlicht. Erforderliche Felder sind mit * markiert