[MAVEN:GHSA-PVJV-386F-C8WH] Apache IoTDB Grafana Connector vulnerable to Improper Authentication

Severity Critical

Affected Packages 2

Fixed Packages 2

CVEs 1

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB. This issue affects Apache IoTDB Grafana Connector from 0.13.0 through 0.13.3.

Attackers could log in without authorization. This is fixed in 0.13.4.

Package	Affected Version
pkg:maven/org.apache.iotdb/iotdb-grafana-connector	>= 0.13.0, < 0.13.4
pkg:maven/apache-iotdb	>= 0.13.0, < 0.13.5

Package	Fixed Version
pkg:maven/org.apache.iotdb/iotdb-grafana-connector	= 0.13.4
pkg:maven/apache-iotdb	= 0.13.5

ID

MAVEN:GHSA-PVJV-386F-C8WH

Severity

critical

URL

https://github.com/advisories/GHSA-pvjv-386f-c8wh

Published

2023-04-17T09:30:24
(17 months ago)

Modified

2023-04-28T19:56:42
(16 months ago)

Rights

Maven Security Team

Other Advisories

PYSEC-2023-7

Source	# ID	Name	URL
			https://nvd.nist.gov/vuln/detail/CVE-2023-24831
			https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l
			https://github.com/advisories/GHSA-pvjv-386f-c8wh

Type	Package URL	Namespace	Name / Product	Version
Affected	pkg:maven/org.apache.iotdb/iotdb-grafana-connector	org.apache.iotdb	iotdb-grafana-connector	>= 0.13.0 < 0.13.4
Fixed	pkg:maven/org.apache.iotdb/iotdb-grafana-connector	org.apache.iotdb	iotdb-grafana-connector	= 0.13.4
Affected	pkg:maven/apache-iotdb		apache-iotdb	>= 0.13.0 < 0.13.5
Fixed	pkg:maven/apache-iotdb		apache-iotdb	= 0.13.5

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date