Lucene search
HistorySep 05, 2022 - 10:15 a.m.
CVE-2022-38369
apache
iotdb
cve
security
upgrade
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.6%
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Affected configurations
Node
apacheiotdbRange≤0.13.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache:iotdb | apache iotdb | eq | 0.13.0 |
CNA Affected
[
{
"product": "Apache IoTDB",
"vendor": "Apache Software Foundation",
"versions": [
{
"status": "affected",
"version": "0.13.0"
}
]
}
]References
Social References
More
Related
veracode
veracode
Insecure Session Management
2022-09-06 11:15:15
github
github
Apache IoTDB Session Fixation vulnerability
2022-09-06 00:00:27
nvd
nvd
CVE-2022-38369
2022-09-05 10:15:09
cvelist
cvelist
CVE-2022-38369 Login check vulnerability by session Id
2022-09-05 09:50:09
osv
osv
Apache IoTDB Session Fixation vulnerability
2022-09-06 00:00:27
cnvd
cnvd
Apache IoTDB Licensing Issue Vulnerability (CNVD-2022-69472)
2022-09-16 00:00:00
prion
prion
Session fixation
2022-09-05 10:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.016 Low
EPSS
Percentile
87.6%
Related for CVE-2022-38369