Description
An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.
Remediation
References
https://lists.apache.org/thread.html/r3d2ff899ead64d2952fdc1fbb1f520ca42011ed2b4c7f786e921f6b9%40%3Cdev.iotdb.apache.org%3E
Related Vulnerabilities
CVE-2018-1000665 Vulnerability in maven package org.apache.geronimo.plugins:dojo
CVE-2020-2123 Vulnerability in maven package org.jenkins-ci.plugins:radargun
CVE-2023-41339 Vulnerability in maven package org.geoserver:gs-wms
CVE-2018-7408 Vulnerability in maven package org.webjars:npm
CVE-2020-13928 Vulnerability in maven package org.apache.atlas:apache-atlas