Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86311
HistoryNov 24, 2022 - 12:00 a.m.

immudb data forgery issue vulnerability

2022-11-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
immudb
data forgery
vulnerability
cryptographic proof
authentication
uuid
client sdk
modified

0.001 Low

EPSS

Percentile

26.9%

Immudb is a database with built-in cryptographic proof and authentication. codenotary immudb versions prior to 1.4.1 are vulnerable to a data forgery issue, which stems from the fact that the client SDK does not validate the UUID and can accept any value reported by the server, and an attacker can use the vulnerability to trick the client into treating the modified UUID as a different server.

CPENameOperatorVersion
codenotary immudblt1.4.1

0.001 Low

EPSS

Percentile

26.9%