CVE-2022-39199

The CVE-2022-39199 issue affects immudb where client SDKs do not validate the server UUID, allowing a malicious server to report a UUID that makes the client treat the server as a different instance and retain an unrelated state. This is described across multiple sources in the connected document...

CVE-2022-36111

CVE-2022-36111 affects immudb client SDKs, not the server. In versions prior to 1.4.1, a malicious immudb server can provide a falsified proof that the client accepts, signing a falsified transaction and replacing the genuine one. The attacker must prompt the client to perform a specific sequence...

CVE-2024-41262

The mmudb software, specifically version 1.9.3 , is vulnerable to a man-in-the-middle (MitM) attack because the ShowMetricsRaw and ShowMetricsAsText functions utilize the insecure HTTP protocol. This flaw allows an attacker to intercept communications between the client and the server, potentiall...