CVE-2022-39199 Lack of proper validation in immudb

immudb is a database with built-in cryptographic proof and verification. immudb client SDKs use server's UUID to distinguish between different server instance so that the client can connect to different immudb instances and keep the state for multiple servers. SDK does not validate this uuid and...

CVE-2022-39199

The CVE-2022-39199 issue affects immudb where client SDKs do not validate the server UUID, allowing a malicious server to report a UUID that makes the client treat the server as a different instance and retain an unrelated state. This is described across multiple sources in the connected document...