Lucene search
+L

330 matches found

Github Security Blog
Github Security Blog
•added 2022/09/06 12:00 a.m.•46 views

Apache IoTDB grafana-connector contains an interface without authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of a database. Users should upgrade to version 0.13.1, which addresses this issue...

7.5CVSS7.2AI score0.01349EPSS
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2022/09/06 12:00 a.m.•45 views

Apache IoTDB Session Fixation vulnerability

Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

8.8CVSS8.4AI score0.01273EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2022/09/06 12:00 a.m.•18 views

GHSA-C86F-9GRV-PMQF Apache IoTDB grafana-connector contains an interface without authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of a database. Users should upgrade to version 0.13.1, which addresses this issue...

7.5CVSS5.8AI score0.01349EPSS
SaveExploits0References5
NVD
NVD
•added 2022/09/05 10:15 a.m.•63 views

CVE-2022-38369

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

8.8CVSS0.01273EPSS
SaveExploits0References2
NVD
NVD
•added 2022/09/05 10:15 a.m.•35 views

CVE-2022-38370

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

7.5CVSS0.01349EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/05 10:15 a.m.•64 views

PYSEC-2022-43069

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

8.8CVSS8.6AI score0.01273EPSS
SaveExploits0References5
PyPA
PyPA
•added 2022/09/05 10:15 a.m.•12 views

PYSEC-2022-43069

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

8.8CVSS7AI score0.01273EPSS
SaveExploits0References5Affected Software1
Prion
Prion
•added 2022/09/05 10:15 a.m.•27 views

Authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

5CVSS7.5AI score0.01349EPSS
SaveExploits0References2Affected Software1
Prion
Prion
•added 2022/09/05 10:15 a.m.•30 views

Session fixation

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

6.8CVSS8.7AI score0.01273EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2022/09/05 10:15 a.m.•28 views

PYSEC-2022-43070

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

7.5CVSS7AI score0.01349EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/09/05 9:50 a.m.•36 views

CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector.

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

7.7AI score0.01349EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/05 9:50 a.m.•14 views

CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector.

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

7AI score
SaveExploits0References4
CVE
CVE
•added 2022/09/05 9:50 a.m.•96 views

CVE-2022-38370

The CVE-2022-38370 issue affects the Apache IoTDB grafana-connector, specifically version 0.13.0, where an interface is exposed without authorization and can reveal internal database structures. The vulnerability is mitigated by upgrading to version 0.13.1, which addresses the issue. Connected so...

7.5CVSS7.5AI score0.01349EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/09/05 9:50 a.m.•73 views

CVE-2022-38369 Login check vulnerability by session Id

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

8.9AI score0.01273EPSS
SaveExploits0References2
OSV
OSV
•added 2022/09/05 9:50 a.m.•11 views

CVE-2022-38369 Login check vulnerability by session Id

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

7.1AI score
SaveExploits0References4
CVE
CVE
•added 2022/09/05 9:50 a.m.•103 views

CVE-2022-38369

CVE-2022-38369 affects Apache IoTDB 0.13.0, vulnerable to a session-id attack (session fixation) that could allow an attacker to hijack a user session. The issue is mitigated by upgrading to IoTDB 0.13.1 . The NVD entry lists a high-severity impact with network exploitation, requiring user intera...

8.8CVSS8.7AI score0.01273EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/05 12:00 a.m.•4 views

CVE-2022-38370: Missing Authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

7.5CVSS7.2AI score0.01349EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/05 12:00 a.m.•22 views

PT-2022-24393 · Apache · Apache Iotdb Grafana-Connector

Name of the Vulnerable Software and Affected Versions: Apache IoTDB grafana-connector version 0.13.0 Description: The issue is related to an interface without authorization in the Apache IoTDB grafana-connector, which may expose the internal structure of a database. Recommendations: For Apache...

7.5CVSS7.3AI score0.01349EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2022/09/05 12:00 a.m.•22 views

PT-2022-24391 · Apache · Apache Iotdb

Name of the Vulnerable Software and Affected Versions: Apache IoTDB version 0.13.0 Description: The issue is related to a session id attack. Users should upgrade to version 0.13.1 to address this issue. Recommendations: For Apache IoTDB version 0.13.0, upgrade to version 0.13.1 to resolve the iss...

8.8CVSS8.5AI score0.01273EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2022/09/05 12:00 a.m.•34 views

Apache IoTDB 授权问题漏洞

Apache IoTDB is an integrated data management engine designed for time-series data from the Apache Foundation that provides data collection, storage, and analysis services, etc. An authorization issue vulnerability exists in Apache IoTDB version 0.13.0, which stems from vulnerability to session i...

8.8CVSS7AI score0.01273EPSS
SaveExploits0References3
Rows per page
Query Builder