Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
xbcrypt in Percona XtraBackup before 2.3.6 and 2.4.x before 2.4.5 does not properly set the initialization vector (IV) for encryption, which makes it easier for context-dependent attackers to obtain sensitive information from encrypted backup files via a Chosen-Plaintext attack. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-6394.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Percona XtraBackup 安全漏洞
Vulnerability Description
Percona XtraBackup是美国Percona公司的一套开源的用来备份MySQL的InnoDB数据库的工具。 Percona XtraBackup 2.3.6之前的版本和2.4.5之前的2.4.x版本中的xbcrypt存在安全漏洞，该漏洞源于程序没有正确设置IV加密。攻击者可利用该漏洞获取加密的备份文件中的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A