Apache IoTDB JMX Code Execution

The vulnerability of the IoT database Apache IoTDB is related to the presence of an open JMX port 31999. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

PT-2020-5583

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 0.8.0 through 0.8.2 Apache IoTDB versions 0.9.0 through 0.9.1 Description The issue is related to the exposure of the JMX port 31999 without certification in Apache IoTDB, allowing remote code execution. When IoTDB is...

CVE-2020-1952: Improper Certificate Validation

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...