Lucene search
+L

259 matches found

OSV
OSV
•added 2023/04/17 7:15 a.m.•29 views

PYSEC-2023-7

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4...

9.8CVSS9.6AI score0.01222EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/17 6:42 a.m.•14 views

CVE-2023-24831 Apache IoTDB grafana-connector Login Bypass Vulnerability

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4...

9.8CVSS7.2AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2023/04/17 6:42 a.m.•41 views

CVE-2023-24831 Apache IoTDB grafana-connector Login Bypass Vulnerability

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4...

9.6AI score0.01222EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/17 12:00 a.m.•2 views

CVE-2023-24831: Improper Authentication

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4...

9.8CVSS5.8AI score0.01222EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/17 12:00 a.m.•3 views

CVE-2023-30771: Incorrect Authorization

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of...

9.8CVSS5.8AI score0.01447EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/31 10:15 a.m.•39 views

CVE-2023-24829

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.8CVSS8.6AI score0.01245EPSS
SaveExploits0References1
OSV
OSV
•added 2023/01/31 10:15 a.m.•36 views

PYSEC-2023-5

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.8CVSS6.8AI score0.01245EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/31 10:15 a.m.•33 views

Authorization

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

6.5CVSS8.5AI score0.01245EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2023/01/31 10:15 a.m.•21 views

PYSEC-2023-5

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.8CVSS7AI score0.01245EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/01/31 9:22 a.m.•52 views

CVE-2023-24829 Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.8AI score0.01245EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/01/31 9:22 a.m.•12 views

CVE-2023-24829 Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.6AI score0.01245EPSS
SaveExploits0References1
OSV
OSV
•added 2023/01/31 9:22 a.m.•15 views

CVE-2023-24829 Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.8CVSS7.1AI score
SaveExploits0References3
CVE
CVE
•added 2023/01/31 9:22 a.m.•73 views

CVE-2023-24829

CVE-2023-24829 involves an Incorrect Authorization vulnerability in the iotdb-web-workbench component of Apache IoTDB. The issue affects iotdb-web-workbench from 0.13.0 up to versions before 0.13.3, and is fixed starting with 0.13.3. iotdb-web-workbench is an optional web console for IoTDB. Conse...

8.8CVSS8.7AI score0.01245EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/31 12:00 a.m.•5 views

CVE-2023-24829: Incorrect Authorization

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13....

8.8CVSS5.8AI score0.01245EPSS
SaveExploits0References3
OSV
OSV
•added 2023/01/30 6:30 p.m.•35 views

GHSA-PP4W-9X82-6R47 Withdrawn Advisory: Apache IoTDB contains Improper Authentication

Withdrawn Advisory This advisory has been withdrawn because the affected component, org.apache.iotdb.admin:iotdb-web-workbench, is not in a supported ecosystem. This link is maintained to preserve external references. Original Description Improper Authentication vulnerability in Apache Software...

7.5CVSS7.4AI score0.01331EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2023/01/30 6:30 p.m.•45 views

Withdrawn Advisory: Apache IoTDB contains Improper Authentication

Withdrawn Advisory This advisory has been withdrawn because the affected component, org.apache.iotdb.admin:iotdb-web-workbench, is not in a supported ecosystem. This link is maintained to preserve external references. Original Description Improper Authentication vulnerability in Apache Software...

7.5CVSS7.2AI score0.01331EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2023/01/30 5:15 p.m.•51 views

CVE-2023-24830

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

7.5CVSS7.6AI score0.01331EPSS
SaveExploits0References1
PyPA
PyPA
•added 2023/01/30 5:15 p.m.•16 views

PYSEC-2023-6

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3...

7.5CVSS7AI score0.01331EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2023/01/30 5:15 p.m.•32 views

Authentication flaw

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

5CVSS7.6AI score0.01331EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/01/30 4:25 p.m.•56 views

CVE-2023-24830 Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3...

7.8AI score0.01331EPSS
SaveExploits0References1
Rows per page
Query Builder