CVE-2022-23942CWE-798
Apache Doris hardcoded cryptography initialization
published April 26, 2022
What it is
Apache Doris, prior to 1.0.0, used a hardcoded key and IV to initialize the cipher used for ldap password, which may lead to information disclosure.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.03360 · 88.7th percentile
- Weakness
- CWE-798 · Use of Hard-coded Credentials
- Published
- 2022-04-26T16:05Z
EPSS history
Timeline