Skip to content
OpenAdvisories
Critical DLA-2501-1 1 CVE

influxdb - security update

Published Dec 20, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 influxdb 1.1.1+dfsg1-4+deb9u1

Vulnerabilities 1

  • Critical 9.8
    CVE-2019-20933 Public exploit Scanner template EPSS 32%

    Improper Authentication in InfluxDB

    InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

    influxdb github.com/influxdata/influxdb influxdb Debian Ubuntu Go