Lucene search
ApacheCVELIST:CVE-2022-23942HistoryApr 26, 2022 - 4:05 p.m.
CVE-2022-23942 Apache Doris hardcoded cryptography initialization
2022-04-2616:05:10
CWE-798
apache
www.cve.org
2
apache doris
prior to 1.0.0
hardcoded key
iv
cipher
ldap password
information disclosure
EPSS
0.001
Percentile
46.5%
Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure.
CNA Affected
[
{
"product": "Apache Doris(Incubating)",
"vendor": "Apache Software Foundation",
"versions": [
{
"status": "affected",
"version": "0.15.0"
}
]
}
]Related
ubuntucve
ubuntucve
CVE-2022-23942
2022-04-26 00:00:00
prion
prion
Information disclosure
2022-04-26 16:15:00
nvd
nvd
CVE-2022-23942
2022-04-26 16:15:47
cve
cve
CVE-2022-23942
2022-04-26 16:15:47