Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2019-20933

🗓️ 19 Nov 2020 01:50:50Reported by mitreType 
cve
 cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 339 Views🌐 WEB

InfluxDB 1.7.6 Auth Bypass Vulnerabilit

Related
Detection
Refs
Paths
Social
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit		Exploit for Improper Authentication in Influxdata Influxdb
24 Jul 202111:12
–githubexploit
githubexploit
GithubExploit		Exploit for Improper Authentication in Influxdata Influxdb
28 Apr 202116:25
–githubexploit
githubexploit
GithubExploit		Exploit for Improper Authentication in Influxdata Influxdb
28 May 202615:27
–githubexploit
githubexploit
GithubExploit		Exploit for Improper Authentication in Influxdata Influxdb
8 Oct 202620:00
–githubexploit
bdu_fstec
BDU FSTEC		The vulnerability of the authenticate function in the services/httpd/handler.go component of the database, related to the deficiencies in the authentication process, allows attackers to access sensitive data, compromise its integrity, and cause service failures.
6 Apr 202100:00
–bdu_fstec
circl
Circl		CVE-2019-20933
19 Nov 202007:41
–circl
cnnvd
CNNVD		Influxdata InfluxDB 授权问题漏洞
18 Nov 202000:00
–cnnvd
cnvd
CNVD		InfluxDB authentication bypass vulnerability
19 Nov 202000:00
–cnvd
cvelist
Cvelist		CVE-2019-20933
19 Nov 202001:50
–cvelist
debian
Debian		[SECURITY] [DLA 2501-1] influxdb security update
20 Dec 202008:28
–debian
Rows per page
NVD
Node
influxdatainfluxdbRange<1.7.6
Node
OR
debiandebian_linuxMatch9.0
debiandebian_linuxMatch10.0
ParameterPositionPathDescriptionCWE
Authorizationheader/queryAuthentication bypass via empty JWT shared secret enabling access to /query without valid credentials.CWE-287

Vigil@nce /hashtag/Vulnérabilité?src=hashtag_click de InfluxDB : élévation de privilèges via Empty SharedSecret JWT Token. https://t.co/s0hBcAPkwH?amp=1 Références : #CVE-2019-20933. #alerte

Vigil@nce #Vulnerability of InfluxDB: privilege escalation via Empty SharedSecret JWT Token. https://t.co/vyFkwJT1yP?amp=1 Identifiers: #CVE-2019-20933. #alert

CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulnerability ... https://t.co/WyLFFH7VsV?amp=1 Customizable Vulnerability Alerts: https://t.co/U7998fz7yk?amp=1

CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulner... https://t.co/WyLFFH7VsV?amp=1 Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd?amp=1

CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulnerability in the ... https://t.co/WyLFFH7VsV?amp=1 Vulnerability Notification: https://t.co/xhLrNnfyrO?amp=1

CVE-2019-20933 InfluxDB before 1.7.6 has an authentication bypass vulnerability ... https://t.co/WyLFFH7VsV Vulnerability Alert Subscriptions: https://t.co/hrQhy5uz4x

4ng3n01r3

#CyberSecurity #Security #CERT #CVE #Nist #Analysed #breach #vulnerability : CVE-2019-20933 (debian_linux, influxdb) https://t.co/X9rIP7NaL1

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:31Current
7.2High risk
Vulners AI Score7.2
CVSS 27.5
CVSS 3.19.8
EPSS0.30921
CWE-287In Wild
influxdbcve-2019-20933authentication bypassjwt tokensharedsecretsecurity vulnerability
339