| |
Vulnerability CVE-2023-41313
Published: 2024-03-12
| Description: |
The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks.
Users are recommended to upgrade to version 2.0.0 + or 1.2.8, which fixes this issue.
|
Type:
CWE-208 (Information Exposure Through Timing Discrepancy)
References: |
https://lists.apache.org/thread/jqczy3vxzs6q6rz9o0626j5nks9fnv95
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
