CVE-2022-23942

CVE-2022-23942 affects Apache Doris versions prior to 1.0.0, where the LDAP password cipher uses a hardcoded key and IV, enabling information disclosure. The issue is exploitable over the network with low attack complexity and no authentication required, compromising confidentiality (per CVSS met...

CVE-2022-23942 Apache Doris hardcoded cryptography initialization

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

CVE-2022-23942: Use of Hard-coded Credentials

Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure...

Apache Doris 信任管理问题漏洞

Apache Doris is a modern MPP analytics database product from the Apache Foundation, USA. An information disclosure vulnerability exists in versions of Apache Doris prior to 1.0.0, which stems from the use of hard-coded keys and IVs to initialize the cipher used for ldap passwords. An attacker cou...

doris-bank.de Cross Site Scripting vulnerability OBB-1224178

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

doris-bank.de XSS vulnerability

Open Bug Bounty ID: OBB-609005 Description| Value ---|--- Affected Website:| doris-bank.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

pst.advisory 2005-21: gxine remote exploitable . opensource is god .lol windows

gxine remote exploitable . opensource is god .lol windows www.ph4nt0m.org Systems affected: gxine 0.44 0.43 0.42 0.41 no affected no all exploitable 1:why: it is a http hostname format string vulnerability.. new firefox can run gxine in many linux DS... so very dangerous!!!!!!!!!!!!!!!!!! 2:tips:...