Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext attacks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Percona XtraBackup 本地信息泄露漏洞
Vulnerability Description
Percona XtraBackup是美国Percona公司的一套开源的用来备份MySQL的InnoDB数据库的工具。 Percona XtraBackup 2.1.5及之前的版本中存在安全漏洞，该漏洞源于程序对初始化向量(IV)使用常量字符串。本地攻击者可利用该漏洞使密码保护机制失效，实施明文攻击。
CVSS Information
N/A
Vulnerability Type
N/A