Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-24831

Apache IoTDB grafana-connector Login Bypass Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
apache

Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache IoTDB

Default version status: unaffected

  • 0.13.0 to ≤ 0.13.3affected

References