Lucene search
China National Vulnerability DatabaseCNVD-2022-06547HistoryNov 19, 2020 - 12:00 a.m.
InfluxDB authentication bypass vulnerability
2020-11-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
0.042 Low
EPSS
Percentile
92.3%
InfluxDB is an open source temporal database developed by InfluxData. An authentication bypass vulnerability exists in the authenticate function in services/httpd/handler.go in versions prior to InfluxDB 1.7.6. The vulnerability stems from the fact that JWT tokens may have an empty SharedSecret. An attacker could use this vulnerability to bypass authentication.
| CPE | Name | Operator | Version |
|---|---|---|---|
| influxdata influxdb | lt | 1.7.6 |
Related
osv
osv
influxdb - security update
2021-01-01 00:00:00
Improper Authentication in InfluxDB
2021-05-18 18:22:05
CVE-2019-20933
2020-11-19 02:15:11
githubexploit
githubexploit
Exploit for Improper Authentication in Influxdata Influxdb
2021-04-28 16:25:31
Exploit for Improper Authentication in Influxdata Influxdb
2021-07-24 11:12:13
veracode
veracode
Authentication Bypass
2019-04-05 02:59:11
cve
cve
CVE-2019-20933
2020-11-19 02:15:11
debiancve
debiancve
CVE-2019-20933
2020-11-19 02:15:11
nessus
nessus
Photon OS 3.0: Influxdb PHSA-2020-3.0-0172
2020-12-10 00:00:00
Debian DSA-4823-1 : influxdb - security update
2021-01-04 00:00:00
Ubuntu 18.04 LTS / 20.04 LTS : InfluxDB vulnerability (USN-5451-1)
2022-05-31 00:00:00
debian
debian
[SECURITY] [DLA 2501-1] influxdb security update
2020-12-20 08:28:39
[SECURITY] [DSA 4823-1] influxdb security update
2021-01-01 18:47:55
nvd
nvd
CVE-2019-20933
2020-11-19 02:15:11
ubuntucve
ubuntucve
CVE-2019-20933
2020-11-19 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2020-0172
2020-12-07 00:00:00
Critical Photon OS Security Update - PHSA-2020-3.0-0172
2020-12-07 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5451-1)
2022-06-02 00:00:00
Debian: Security Advisory (DLA-2501-1)
2020-12-21 00:00:00
Debian: Security Advisory (DSA-4823-1)
2021-01-03 00:00:00
nuclei
nuclei
InfluxDB <1.7.6 - Authentication Bypass
2022-08-23 03:59:33
prion
prion
Authentication flaw
2020-11-19 02:15:00
github
github
Improper Authentication in InfluxDB
2021-05-18 18:22:05
redhatcve
redhatcve
CVE-2019-20933
2020-11-20 18:22:58
ubuntu
ubuntu
InfluxDB vulnerability
2022-05-31 00:00:00
cvelist
cvelist
CVE-2019-20933
2020-11-19 01:50:50