354 matches found
InfluxDB <1.7.6 - Authentication Bypass
InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret aka shared secret. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...
CVE-2024-30896
CVE-2024-30896 Краткое описание Ошибка бизнес-логики в influxdb позволяет пользователям, владеющим действительным токеном allAccess, повышать свои привилегии до уровня оператора путем перечисления текущих токенов авторизации. Сценарий Злоумышленником может быть пользователь, которому администрато...
InfluxDB-Exploit-CVE-2019-20933
InfluxDB Exploit CVE-2019-20933 Эксплойт для уязвимости InfluxDB CVE-2019-20933: в InfluxDB до версии 1.7.6 функция authenticate в services/httpd/handler.go содержит уязвимость обхода аутентификации, поскольку JWT-токен может иметь пустой SharedSecret общий секрет. Эксплойт проверяет, уязвим ли...
CVE-2019-20933
CVE-2019-20933 В InfluxDB до версии 1.7.6 существует уязвимость обхода аутентификации в функции authenticate в services/httpd/handler.go, поскольку JWT-токен может иметь пустой SharedSecret также известный как общий секрет. см. https://nvd.nist.gov/vuln/detail/CVE-2019-20933 для получения...
CVE-2019-20933
ЛАБОРАТОРНАЯ РАБОТА 5 – CVE-2019-20933 I. АНАЛИЗ СИСТЕМЫ Определение поверхности атаки Начнём с того, что запущено в среде. Я выведу список всех активных контейнеров: docker ps Жертва предоставляет доступ к одному порту:8086. В настоящее время у меня нет подробной информации о цели. Из вывода...
CVE-2026-84445 affecting package influxdb for versions less than 2.7.5-21
CVE-2026-84445 affecting package influxdb for versions less than 2.7.5-21. An upgraded version of the package is available that resolves this issue...
CVE-2026-72817 affecting package influxdb for versions less than 2.7.5-21
CVE-2026-72817 affecting package influxdb for versions less than 2.7.5-21. A patched version of the package is available...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
GHSA-JFWF-28XR-XW6Q vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71309 vulnerabilities
Vulnerabilities for packages: telegraf...
Photon OS 5.0: Influxdb PHSA-2023-5.0-91-0009
An update of the influxdb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Influxdb PHSA-2023-5.0-90-0009
An update of the influxdb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-90-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 5.0: Influxdb PHSA-2023-5.0-92-0009
An update of the influxdb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-92-0009. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19. A patched version of the package is available...
AZL-94217 CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...