320 matches found
Authentication flaw
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...
UBUNTU-CVE-2019-20933
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...
CVE-2019-20933
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...
CVE-2019-20933
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret aka shared secret...
CVE-2019-20933
InfluxDB before 1.7.6 contains an authentication bypass in the authenticate function (services/httpd/handler.go) where a JWT token may carry an empty SharedSecret. This can allow an attacker to bypass authentication and gain unauthorized access, potentially enabling data modification or administr...
InfluxDB authentication bypass vulnerability
InfluxDB is an open source temporal database developed by InfluxData. An authentication bypass vulnerability exists in the authenticate function in services/httpd/handler.go in versions prior to InfluxDB 1.7.6. The vulnerability stems from the fact that JWT tokens may have an empty SharedSecret. ...
Influxdata InfluxDB 授权问题漏洞
InfluxDB is an open source temporal database developed by InfluxData. An authentication bypass vulnerability exists in the authenticate function in services/httpd/handler.go in versions prior to InfluxDB 1.7.6. The vulnerability stems from the fact that JWT tokens may have an empty SharedSecret. ...
Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Moderate: grafana security, bug fix, and enhancement update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgraded to a later upstream version: grafana 6.7.4. BZ1807323 Security Fixes: grafana: XSS vulnerability via a column style on the "Dashboard Table Panel...
influxdb:fuzzjsonweb: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5206851896213504 Project: influxdb Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsonweb Job Type: libfuzzerasaninfluxdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000003014946 Crash State: NULL Sanitizer: address ASAN Recommended...
influxdb:fuzzjsonweb: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5681665654128640 Project: influxdb Fuzzing Engine: libFuzzer Fuzz Target: fuzzjsonweb Job Type: libfuzzerasaninfluxdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000000d663 Crash State: NULL Sanitizer: address ASAN Recommended...
Fedora: Security Advisory for grafana (FEDORA-2020-e6e81a03d6)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 32 Update: grafana-6.7.4-1.fc32
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...
[SECURITY] Fedora 31 Update: grafana-6.7.4-1.fc31
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...
[SECURITY] Fedora 32 Update: grafana-6.7.3-1.fc32
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...
[SECURITY] Fedora 31 Update: grafana-6.7.3-1.fc31
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...
Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update
An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
PT-2022-23525
Name of the Vulnerable Software and Affected Versions influxDB versions prior to 1.8.10 Description The issue concerns the lack of an authentication mechanism or controls in influxDB, allowing unauthenticated attackers to execute arbitrary commands. This could potentially expose data to any...
Cross-site Scripting (XSS)
github.com/influxdata/influxdb is vulnerable to cross-site scripting XSS. The attack exists due to lack of validation of input value to the Write Data module, allowing an attacker to inject malicious script...