CVE-2023-41313

2024-03-1211:15:46

CWE-208

[email protected]

web.nvd.nist.gov

apache doris

authentication

timing attacks

cve-2023-41313

security vulnerability

upgrade

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.0%

JSON

The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks.
Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.

Affected configurations

Vulners

Node

apachedorisRange≤1.2.8

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Doris",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.2.8",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]