CVE-2020-1952

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...

CVE-2020-1952

Summary: CVE-2020-1952 affects Apache IoTDB (versions 0.8.0–0.8.2 and 0.9.0–0.9.1). The issue is that the JMX port 31999 is exposed at startup without authentication, allowing remote code execution by an unauthenticated attacker. The connected documents corroborate the same description across mul...

PT-2020-5583

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 0.8.0 through 0.8.2 Apache IoTDB versions 0.9.0 through 0.9.1 Description The issue is related to the exposure of the JMX port 31999 without certification in Apache IoTDB, allowing remote code execution. When IoTDB is...

CVE-2020-1952: Improper Certificate Validation

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely...