Weak Password Requirements vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.6.0.  When users change their password to a simple password (with any character or symbol), attackers can easily guess the user's password and access the account. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7805 https://github.com/apache/inlong/pull/7805 to solve it.
History

Fri, 11 Oct 2024 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2023-05-22T15:31:53.989Z

Updated: 2024-10-11T13:59:56.171Z

Reserved: 2023-04-24T06:13:00.131Z

Link: CVE-2023-31098

cve-icon Vulnrichment

Updated: 2024-08-02T14:45:25.732Z

cve-icon NVD

Status : Modified

Published: 2023-05-22T16:15:10.150

Modified: 2024-11-21T08:01:24.643

Link: CVE-2023-31098

cve-icon Redhat

No data.