Apache IoTDB Licensing Issue Vulnerability (CNVD-2022-69472)

Apache IoTDB is an integrated data management engine designed for time-series data from the Apache Foundation that provides data collection, storage, and analysis services, etc. An authorization issue vulnerability exists in Apache IoTDB version 0.13.0, which stems from vulnerability to session i...

Apache IoTDB Access Control Error Vulnerability

Apache IoTDB is an integrated data management engine designed for time series data from the Apache Foundation that provides data collection, storage, and analysis services, among other things.Apache IoTDB version 0.13.0 contains an access control error vulnerability that stems from the inclusion ...

Insecure Session Management

org.apache.iotdb:iotdb-server uses insecure session management. Lack of proper validation of session ID at checkLogin function allows an attacker to bypass the intended authentication behavior through a session id attack...

iotdb-session-0-10-1 (>=0.1.0, <=0.1.5) potentially affected by CVE-2022-38369 via apache-iotdb (0.10.1)

apache-iotdb PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-iotdb and may be impacted: - iotdb-session-0-10-1 =0.1.0, =0.1.5 Source cves: CVE-2022-38369 Source advisory: GHSA-G6VM-3CH8-C6JQ...

GHSA-C86F-9GRV-PMQF Apache IoTDB grafana-connector contains an interface without authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of a database. Users should upgrade to version 0.13.1, which addresses this issue...

Apache IoTDB grafana-connector contains an interface without authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of a database. Users should upgrade to version 0.13.1, which addresses this issue...

org.apache.iotdb:iotdb-distribution (0.13.0) potentially affected by CVE-2022-38370 via org.apache.iotdb:iotdb-grafana-connector (0.13.0)

org.apache.iotdb:iotdb-grafana-connector MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.iotdb:iotdb-grafana-connector and may be impacted: - org.apache.iotdb:iotdb-distribution 0.13.0 Source cves: CVE-2022-38370 Source...

iotdb-session-0-10-1 (>=0.1.0, <=0.1.5) potentially affected by CVE-2022-38369 via apache-iotdb (0.10.1)

apache-iotdb PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-iotdb and may be impacted: - iotdb-session-0-10-1 =0.1.0, =0.1.5 Source cves: CVE-2022-38369 Source advisory: OSV:GHSA-G6VM-3CH8-C6JQ...

GHSA-G6VM-3CH8-C6JQ Apache IoTDB Session Fixation vulnerability

Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

Apache IoTDB Session Fixation vulnerability

Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

CVE-2022-38369

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

CVE-2022-38370

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

iotdb-session-0-10-1 (>=0.1.0, <=0.1.5) potentially affected by CVE-2022-38369 via apache-iotdb (0.10.1)

apache-iotdb PYPI version 0.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on apache-iotdb and may be impacted: - iotdb-session-0-10-1 =0.1.0, =0.1.5 Source cves: CVE-2022-38369 Source advisory: OSV:PYSEC-2022-43069...

PYSEC-2022-43069

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

Authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

PYSEC-2022-43070

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...

PYSEC-2022-43069

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

Session fixation

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue...

CVE-2022-38370

The CVE-2022-38370 issue affects the Apache IoTDB grafana-connector, specifically version 0.13.0, where an interface is exposed without authorization and can reveal internal database structures. The vulnerability is mitigated by upgrading to version 0.13.1, which addresses the issue. Connected so...

CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector.

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue...