Lenovo XClarity Controller 安全漏洞

Lenovo XClarity Controller XCC is a server-embedded management engine from Lenovo China, which is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller. An attacker exploited the vulnerability to cause LDAP client password...

Apache Doris 信任管理问题漏洞

Apache Doris is a modern MPP analytics database product from the Apache Foundation, USA. An information disclosure vulnerability exists in versions of Apache Doris prior to 1.0.0, which stems from the use of hard-coded keys and IVs to initialize the cipher used for ldap passwords. An attacker cou...

Cloudera Manager Saving Passwords in Plaintext Vulnerability

Cloudera Manager is a set of Hadoop data management software from Cloudera, USA. The software supports the creation of clusters, authentication, data backup and recovery and so on. Cloudera Manager has a security vulnerability. Since the program stores LDAP binding passwords in plaintext in a...