Authorization

2023-01-3110:15:00

PRIOn knowledge base

www.prio-n.com

apache iotdb

vulnerability

authorization

web console

8.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.6%

JSON

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.

CPENameOperatorVersion
iotdbge0.13.0
iotdblt0.13.3

CPE	Name	Operator	Version
	iotdb	ge	0.13.0
	iotdb	lt	0.13.3

References

lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo