390 matches found
Influxdb Authentication Bypass Vulnerability
InfluxDB is an open source temporal database developed by InfluxData. Influxdb suffers from an authentication bypass vulnerability that can be exploited by an attacker to gain control of the database and arbitrarily perform add, delete, or change operations...
Influxdb authentication bypass vulnerability alerts-a vulnerability alert-the black bar safety net
0x00 vulnerability background 2019 5 December 31, 360CERT monitoring to the @Moti Harmats in Komodosec released InfluxDB database authentication bypass vulnerability details. A malicious attacker can easily obtain a complete database of control permissions, you can optionally perform CRUD...
CVE-2019-10329
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Design/Logic Flaw
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10329
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10329
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10329
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
CVE-2019-10329
CVE-2019-10329 affects the Jenkins InfluxDB Plugin (versions 1.21 and earlier). The root cause is unencrypted credentials stored in the plugin’s global configuration file on the Jenkins master, allowing users with access to the master filesystem to view them. Impact is credential disclosure. Reme...
CVE-2019-10329
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
influxdb stored credentials in plain text
influxdb stored target passwords unencrypted in its global configuration file on the Jenkins controller. These credentials could be viewed by users with access to the Jenkins controller file system. influxdb now stores its passwords encrypted...
CVE-2019-10329: Insufficiently Protected Credentials
Jenkins InfluxDB Plugin 1.21 and earlier stored credentials unencrypted in its global configuration file on the Jenkins master where they can be viewed by users with access to the master file system...
Authentication Bypass
github.com/influxdata/influxdb is vulnerable to authentication bypass. A remote attacker is able to bypass authentication and gain access to the application by submitting a blank shared secret in a BearerAuthentication...
PT-2019-5775 · Influxdata +3 · Influxdb +3
Name of the Vulnerable Software and Affected Versions: InfluxDB versions prior to 1.7.6 Description: The issue is related to an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go due to a JWT token having an empty SharedSecret. This allows a remote...
CVE-2018-1000816
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
Cross-Site Scripting (XSS)
github.com/grafana/grafana is susceptible to cross-site scripting XSS. The vulnerability is possible because it does not escape the typeahead values in metric segment, query part and sql part in Influxdb and Graphite query editor...
CVE-2018-1000816
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
Cross site scripting
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
CVE-2018-1000816
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
UBUNTU-CVE-2018-1000816
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...
CVE-2018-1000816
Grafana version confirmed for 5.2.4 and 5.3.0 contains a Cross Site Scripting XSS vulnerability in Influxdb and Graphite query editor that can result in Running arbitrary js code in victims browser.. This attack appear to be exploitable via Authenticated user must click on the input field where t...