Bielefelder Str. 14 D 10709 Berlin cure53.de · mario@cure53.de • The cryptographic and authentication-related aspects were analyzed for potential general bypasses but no flaws allowing timing-safe variant of comparing strings. Using Go’s ConstantTimeCompare in the crypto/subtle’s module is advised. Cure53, Berlin · 03/08/19 7/9 Dr.-Ing. Mario

Missing documentation on deploying VTAdmin-web securely Moderate Yes 2 ADA-VIT-SA23-2 Insecure cryptographic primitives Informational Yes 3 ADA-VIT-SA23-3 SQL injection in sqlutils Informational Yes 4 length required for the actor name. 17 Vitess Security Audit, 2023 ADA-VIT-SA23-2: Insecure cryptographic primitives ID ADA-VIT-SA23-2 Component Multiple Severity Informational Fixed Yes Vitess uses that all uses of insecure hashing functions fall in one of two categories: they are either not cryptographic primitives or Vitess are bound to use a specific hashing algorithm to comply with MySQLʼs interface

UpdateThrottlerConfiguration GetThrottlerConfiguration Returns the current configuration of the MaxReplicationLag module. If no throttler name is specified, the configuration of all throttlers will be returned. 126 Example ‘%v’: %v ResetThrottlerConfiguration Resets the current configuration of the MaxReplicationLag module. If no throttler name is specified, the configuration of all throttlers will be reset. Example ‘%v’: %v UpdateThrottlerConfiguration Updates the configuration of the MaxReplicationLag module. The configuration must be specified as protobuf text. If a field is omitted or has a zero value

UpdateThrottlerConfiguration GetThrottlerConfiguration Returns the current configuration of the MaxReplicationLag module. If no throttler name is specified, the configuration of all throttlers will be returned. 134 Example ‘%v’: %v ResetThrottlerConfiguration Resets the current configuration of the MaxReplicationLag module. If no throttler name is specified, the configuration of all throttlers will be reset. Example ‘%v’: %v UpdateThrottlerConfiguration Updates the configuration of the MaxReplicationLag module. The configuration must be specified as protobuf text. If a field is omitted or has a zero value