Package · Ubuntu

influxdb

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2024-30896 Public exploit

InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows au…

influxdb influxdb Ubuntu Azure Linux

Nov 21, 2024
Critical 9.8

CVE-2019-20933 Public exploit Scanner template EPSS 32%

Improper Authentication in InfluxDB

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

influxdb github.com/influxdata/influxdb influxdb Debian Ubuntu Go

Nov 19, 2020