Lucene search
GoogleOSV:GHSA-Q46V-CJ5V-HVG6HistoryMay 17, 2022 - 12:22 a.m.
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
2022-05-1700:22:31
Google
osv.dev
7
0.002 Low
EPSS
Percentile
53.0%
Apache Hadoop before 0.23.4, 1.x before 1.0.4, and 2.x before 2.0.2 generate token passwords using a 20-bit secret when Kerberos security features are enabled, which makes it easier for context-dependent attackers to crack secret keys via a brute-force attack.
Related
veracode
veracode
Insecure Token Passwords
2017-10-31 05:35:11
cve
cve
CVE-2012-4449
2017-10-30 19:29:00
prion
prion
Security feature bypass
2017-10-30 19:29:00
openvas
openvas
Apache Hadoop Weak Key Encryption Vulnerability
2017-11-08 00:00:00
github
github
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
2022-05-17 00:22:31
nvd
nvd
CVE-2012-4449
2017-10-30 19:29:00
cvelist
cvelist
CVE-2012-4449
2017-10-30 19:00:00