Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.
CPE | Name | Operator | Version |
---|---|---|---|
opensuse | eq | 13.1 | |
xtrabackup | eq | 2.1.0 beta1 | |
xtrabackup | eq | 2.1.0 rc1 | |
xtrabackup | eq | 2.1.2 | |
xtrabackup | le | 2.1.5 | |
xtrabackup | eq | 2.1.4 | |
xtrabackup | eq | 2.1.3 | |
xtrabackup | eq | 2.1.0 alpha1 | |
xtrabackup | eq | 2.1.1 |