Lucene search
Veracode Vulnerability DatabaseVERACODE:36951HistorySep 06, 2022 - 3:54 a.m.
Authorization Bypass
2022-09-0603:54:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
iot security
authorization bypass
database exposure
0.001 Low
EPSS
Percentile
47.6%
iotdb-server is vulnerable to authorization bypass. The vulnerability exists because the library does not properly handle privileges for the internal interfaces, leading to exposure to the database’s internal structure.
| CPE | Name | Operator | Version |
|---|---|---|---|
| iotdb server | le | 0.13.0 | |
| iotdb server | le | 0.13.0 |
References
Related
github
github
Apache IoTDB grafana-connector contains an interface without authorization
2022-09-06 00:00:27
cvelist
cvelist
cnvd
cnvd
Apache IoTDB Access Control Error Vulnerability
2022-09-07 00:00:00
cve
cve
CVE-2022-38370
2022-09-05 10:15:09
osv
osv
Apache IoTDB grafana-connector contains an interface without authorization
2022-09-06 00:00:27
nvd
nvd
CVE-2022-38370
2022-09-05 10:15:09
prion
prion
Authorization
2022-09-05 10:15:00