Lucene search
Veracode Vulnerability DatabaseVERACODE:5351HistoryOct 31, 2017 - 5:35 a.m.
Insecure Token Passwords
2017-10-3105:35:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
53.0%
Hadoop-common is vulnerable to brute-force attacks due to insecure token passwords. When Kerberos security features are enabled, token passwords are generated using only a 20-bit secret. Leveraging this flaw, attacker can easily crack secret keys using a brute-force attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache hadoop common | le | 0.23.3 | |
| apache hadoop common | le | 2.0.2-alpha |
Related
cve
cve
CVE-2012-4449
2017-10-30 19:29:00
prion
prion
Security feature bypass
2017-10-30 19:29:00
openvas
openvas
Apache Hadoop Weak Key Encryption Vulnerability
2017-11-08 00:00:00
osv
osv
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
2022-05-17 00:22:31
github
github
Use of a Broken or Risky Cryptographic Algorithm in Apache Hadoop
2022-05-17 00:22:31
nvd
nvd
CVE-2012-4449
2017-10-30 19:29:00
cvelist
cvelist
CVE-2012-4449
2017-10-30 19:00:00