Aller au contenu
en Se connecter
Non notée

CVE-2023-31098 Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong:…

Description

Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0.  When users change their password to a simple password (with any character or symbol), attackers can easily guess the user's password and access the account. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7805 https://github.com/apache/inlong/pull/7805 to solve it.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache InLong 1.1 1.1.0 → 1.6.0 Pas de correctif indiqué
inlong 1.1 1.1.0 → 1.6.0 Pas de correctif indiqué

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache InLong

Les 41 CVE de Apache InLong →
CVE-2026-63046 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache InLong. Agent… Non notée CVE-2026-63044 Server-Side Request Forgery (SSRF) vulnerability in Apache InLong.  Any authenticated user (no admin role required)… Non notée CVE-2026-63043 Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem Non notée CVE-2026-63042 Files or Directories Accessible to External Parties vulnerability in Apache InLong Non notée
Suivre cette CVE