Skip to content
OpenAdvisories

Archive

19 November 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-20933 Public exploit Scanner template EPSS 32%

    Improper Authentication in InfluxDB

    InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).