339 matches found
InfluxDB-Exploit-CVE-2019-20933
Exploit de InfluxDB CVE-2019-20933 Exploit para la vulnerabilidad CVE-2019-20933 de InfluxDB, InfluxDB anterior a 1.7.6 tiene una vulnerabilidad de omisión de autenticación en la función authenticate en services/httpd/handler.go porque un token JWT puede tener un SharedSecret vacío también conoci...
CVE-2019-20933
CVE-2019-20933 InfluxDB anterior a la versión 1.7.6 tiene una vulnerabilidad de omisión de autenticación en la función authenticate en services/httpd/handler.go porque un token JWT puede tener un SharedSecret vacío también conocido como secreto compartido. see...
CVE-2019-20933
Laboratorio 5-CVE-2019-20933 I. ANÁLISIS DEL SISTEMA Identificación de la Superficie de Ataque Comenzando por lo que se está ejecutando en el entorno. Enumero todos los contenedores activos: root@kitploit: docker ps La víctima expone un único puerto:8086. Actualmente, no dispongo de información...
InfluxDB <1.7.6 - Authentication Bypass
InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret aka shared secret. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...
CVE-2024-30896
CVE-2024-30896 Summary A business logic flaw in influxdb allows users who own a valid allAccess token to escalate their privileges at operator level by listing current authorization tokens. Scenario Attacker might be a user which was gained access by an administrator via an allAccess token only...
CVE-2026-84445 affecting package influxdb for versions less than 2.7.5-21
CVE-2026-84445 affecting package influxdb for versions less than 2.7.5-21. An upgraded version of the package is available that resolves this issue...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-43871 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20
CVE-2026-48586 affecting package influxdb for versions less than 2.7.5-20. A patched version of the package is available...
GHSA-JFWF-28XR-XW6Q vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-71309 vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19. A patched version of the package is available...
AZL-94217 CVE-2026-55969 affecting package influxdb for versions less than 2.7.5-20
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, cglib, Go, netstd, Delphi and Haxe bindings. This issue affects Apache Thrift: before 0.24.0. Users are recommended to upgrade to version 0.24.0, which fixes the issue...
AZL-93204 CVE-2026-56852 affecting package influxdb for versions less than 2.7.5-19
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...
CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-25680 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-39821 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...
CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17
CVE-2026-27136 affecting package influxdb for versions less than 2.7.5-17. A patched version of the package is available...