Lucene search

K
osvGoogleOSV:CVE-2019-20933
HistoryNov 19, 2020 - 2:15 a.m.

CVE-2019-20933

2020-11-1902:15:11
Google
osv.dev
5

6.9 Medium

AI Score

Confidence

Low

0.042 Low

EPSS

Percentile

92.3%

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).