activemq:activemq-core (3.2), activemq:activemq-gbean (3.2) +610 more potentially affected by CVE-2009-4269 via org.apache.derby:derby (>=10.1.1.0, <=10.5.3.0_1)

org.apache.derby:derby MAVEN version =10.1.1.0, =4.2.0, =1.0-beta, =1.0-beta, =1.0-beta, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =blink-3.2.0, =1.5.1 and more Source cves: CVE-2009-4269 Source advisory: OSV:GHSA-FH32-35W2-RXCC...

CVE-2010-4474

Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269...

Design/Logic Flaw

Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269...

CVE-2010-4474

Unspecified vulnerability in the Java DB component in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows local users to affect confidentiality via unknown vectors related to Security, a similar vulnerability to CVE-2009-4269...

activemq:activemq-core (3.2), activemq:activemq-gbean (3.2) +610 more potentially affected by CVE-2009-4269 via org.apache.derby:derby (>=10.1.1.0, <=10.5.3.0_1)

org.apache.derby:derby MAVEN version =10.1.1.0, =4.2.0, =1.0-beta, =1.0-beta, =1.0-beta, =5.6.100, =2.0.6, =1.0.10, =1.0.8, =blink-3.2.0, =1.5.1 and more Source cves: CVE-2009-4269 Source advisory: MEND:CVE-2009-4269...

CVE-2009-4269

CVE-2009-4269 affects Apache Derby BUILTIN authentication. The password hash generation transforms inputs before SHA-1, reducing the input space and enabling easier hash collisions, increasing the risk of password cracking. Affected versions include Derby prior to 10.6.1.0; remediation is to upgr...