Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

Remediation

References

https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l

Related Vulnerabilities

CVE-2019-10357 Vulnerability in maven package org.jenkins-ci.plugins.workflow:workflow-cps-global-lib

CVE-2016-0706 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2022-45135 Vulnerability in maven package org.apache.cocoon:cocoon-databases-impl

CVE-2022-25167 Vulnerability in maven package org.apache.flume:flume-parent

CVE-2016-9177 Vulnerability in maven package com.sparkjava:spark-core

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Mailing List Vendor Advisory NVD-CWE-noinfo