CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

CVE-2018-17572

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

PT-2020-8618

Name of the Vulnerable Software and Affected Versions: InfluxDB version 0.9.5 Description: The issue is related to Reflected XSS in the Write Data module of InfluxDB, which can also be accessed via the admin panel. Recommendations: For InfluxDB version 0.9.5, consider disabling the Write Data...

CVE-2018-17572: Improper Neutralization of Input During Web Page Generation

InfluxDB 0.9.5 has Reflected XSS in the Write Data module...

Kubernetes: Grafana Improper authorization

Summary: new report from part2. wrong configuration causes Grafana datasource to use root userwith influxdb admin priv. Component Version: test-infra:master Steps To Reproduce: in normally configuration read-only user used by grafana, but in my test i found datasource user wite admin perms. refer...

AZL-41158 CVE-2019-0205 affecting package influxdb for versions less than 2.7.3-4

In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings...

Fedora Update for grafana FEDORA-2019-0bb6b876da

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora Update for grafana FEDORA-2019-77d612eab4

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 29 Update: grafana-6.3.4-1.fc29

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

[SECURITY] Fedora 30 Update: grafana-6.3.4-1.fc30

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB...

Grafana Access Control Error Vulnerability

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. An access control error vulnerability exists in Grafana, which can be exploited by an...

Influxdb Authentication Bypass Vulnerability

InfluxDB is an open source temporal database developed by InfluxData. Influxdb suffers from an authentication bypass vulnerability that can be exploited by an attacker to gain control of the database and arbitrarily perform add, delete, or change operations...

Influxdb authentication bypass vulnerability alerts-a vulnerability alert-the black bar safety net

0x00 vulnerability background 2019 5 December 31, 360CERT monitoring to the @Moti Harmats in Komodosec released InfluxDB database authentication bypass vulnerability details. A malicious attacker can easily obtain a complete database of control permissions, you can optionally perform CRUD...

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

Design/Logic Flaw

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10329

CVE-2019-10329 affects the Jenkins InfluxDB Plugin (versions 1.21 and earlier). The root cause is unencrypted credentials stored in the plugin’s global configuration file on the Jenkins master, allowing users with access to the master filesystem to view them. Impact is credential disclosure. Reme...

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...

CVE-2019-10329

Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...