yugabytedb Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/yugabytedb/ Thu, 23 Feb 2023 05:20:03 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png yugabytedb Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/yugabytedb/ 32 32 CVE-2022-37397 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-37397/ Thu, 23 Feb 2023 05:20:03 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-37397/ An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password.

The post CVE-2022-37397 appeared first on CVE Vulnerability.

]]> An issue was discovered in the YugabyteDB 2.6.1 when using LDAP-based authentication in YCQL with Microsoft’s Active Directory. When anonymous or unauthenticated LDAP binding is enabled, it allows bypass of authentication with an empty password.

The post CVE-2022-37397 appeared first on CVE Vulnerability.

]]> CVE-2023-0575 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0575/ Wed, 22 Feb 2023 14:02:15 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0575 External Control of Critical State Data, Improper Control of Generation of Code (‘Code Injection’) vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.

The post CVE-2023-0575 appeared first on CVE Vulnerability.

]]> External Control of Critical State Data, Improper Control of Generation of Code (‘Code Injection’) vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS (DevopsBase.Java:execCommand, TableManager.Java:runCommand modules) allows API Manipulation, Privilege Abuse. This vulnerability is associated with program files backup.Py. This issue affects Yugabyte DB: Lesser then 2.2.

The post CVE-2023-0575 appeared first on CVE Vulnerability.

]]>