CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector.

2022-09-0509:50:10

apache

www.cve.org

vulnerability

apache iotdb

grafana-connector

upgrade

authorization

0.001 Low

EPSS

Percentile

47.6%

JSON

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

CNA Affected

[
  {
    "product": "Apache IoTDB",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "0.13.0"
      }
    ]
  }
]