VDB
GHSA-fh32-35w2-rxcc
GHSA-fh32-35w2-rxcc
PUBLISHED
Use of Password Hash With Insufficient Computational Effort in Apache Derby
Record from GitHub Advisory Database · Published May 2, 2022
derby is fixed in 10.6.1.0 (Maven Central)
Use of Password Hash With Insufficient Computational Effort in Apache Derby
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| org.apache.derby:derby | Maven Central | 10.6.1.0 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Maven | org.apache.derby:derby | 0 |
Timeline
- May 2, 2022 CVE Published
- Apr 30, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-fh32-35w2-rxcc
vulnetix vdb fixes GHSA-fh32-35w2-rxccOr with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-fh32-35w2-rxcc/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://nvd.nist.gov/vuln/detail/CVE-2009-4269 advisory
- https://github.com/apache/derby/commit/178ca0cfb796b5a5788d25ded0978773ea254332 url
- https://issues.apache.org/jira/browse/DERBY-4483 url
- https://github.com/apache/derby/commit/60edeb0cb29daf9d28ece1863db779c1af5a3f62 url
- https://github.com/apache/derby/commit/8c305e2f3fad1c3a4f98c06c7f2b53e2bfdd308c url
- http://marc.info/?l=apache-db-general&m=127428514905504&w=1 url
- http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html url
- https://github.com/apache/derby/commit/23f97a597716ee5b08eff698b7177850ad8e1294 url
- https://github.com/apache/derby/commit/3b82686e32a8d4fa2027350279104f9b243b35d6 url
- http://db.apache.org/derby/releases/release-10.6.1.0.cgi#Fix+for+Security+Bug+CVE-2009-4269 url