Lucene search
Veracode Vulnerability DatabaseVERACODE:39150HistoryFeb 07, 2023 - 6:59 a.m.
Improper Authentication
2023-02-0706:59:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
iotdb-server
improper authentication
remote attacker
authorization bypass
publishhandler.java
0.006 Low
EPSS
Percentile
79.0%
org.apache.iotdb:iotdb-server is vulnerable to Improper Authentication. A remote attacker is able to bypass authorization due to improper checks in the onConnect function of PublishHandler.java.
| CPE | Name | Operator | Version |
|---|---|---|---|
| iotdb server | le | 0.13.2 | |
| iotdb: core: data-node (server) | le | 0.13.2 |
Related
cve
cve
CVE-2023-24830
2023-01-30 17:15:09
osv
osv
PYSEC-2023-6
2023-01-30 17:15:00
Apache IoTDB contains Improper Authentication
2023-01-30 18:30:28
github
github
Withdrawn Advisory: Apache IoTDB contains Improper Authentication
2023-01-30 18:30:28
prion
prion
Authentication flaw
2023-01-30 17:15:00
nvd
nvd
CVE-2023-24830
2023-01-30 17:15:09
cvelist
cvelist