GitHub Advisoryadvisory · Maven, PyPI

GHSA-pvjv-386f-c8wh Apache IoTDB Grafana Connector vulnerable to Improper Authentication

CRITICAL Published 2023-04-17 Modified 2024-09-12 Official page ↗
Aliases
CVE-2023-24831
Ecosystem
Maven, PyPI
Packages
org.apache.iotdb:iotdb-grafana-connector, apache-iotdb
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287
Reviewed
2023-04-21

Affected packages

• Maven org.apache.iotdb:iotdb-grafana-connector: >= 0.13.0, < 0.13.4 → fixed in 0.13.4 • PyPI apache-iotdb: >= 0.13.0, < 0.13.5 → fixed in 0.13.5

Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB. This issue affects Apache IoTDB Grafana Connector from 0.13.0 through 0.13.3. Attackers could log in without authorization. This is fixed in 0.13.4.

Related

Alias · CVE (1)

  • CVE-2023-24831 Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from… vulnerability

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References