Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The password hash generation algorithm in the BUILTIN authentication functionality for Apache Derby before 10.6.1.0 performs a transformation that reduces the size of the set of inputs to SHA-1, which produces a small search space that makes it easier for local and possibly remote attackers to crack passwords by generating hash collisions, related to password substitution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache Derby BUILTIN认证函数加密问题漏洞
Vulnerability Description
Apache Derby 10.6.1.0之前版本中的BUILTIN认证函数中的哈希密码生成算法执行降低输入SHA-1大小的转换，产生一个极小的搜索空间，本地和可能的远程攻击者更容易通过生成散列碰撞破解密码。
CVSS Information
N/A
Vulnerability Type
N/A