ZTE GoldenDB Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in ZTE GoldenDB versions 6.1.03 through 6.1.03.04. This vulnerability allows attackers to manipulate input data by altering password strength requirements. As a result, new users may be unable to change their passwords upon login, leading to a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition, preventing new users from changing their passwords upon login.

Remediation

Users can upgrade to ZTE GoldenDB version 6.1.03.05 to address this vulnerability. For assistance, contact the ZTE Global Customer Support Center.