Skip to content
OpenAdvisories
High · 8.8 CVE-2022-38369 EUVD-2022-0023GHSA-g6vm-3ch8-c6jqPYSEC-2022-43069

Login check vulnerability by session Id

Published Sep 5, 2022 · Updated Aug 3, 2024 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache IoTDB Package: apache-iotdb Package: org.apache.iotdb:iotdb-server Ecosystem: Maven Ecosystem: PyPI

Description

Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache IoTDB 0.13.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.iotdb:iotdb-server < 0.13.1 0.13.1 GHSA-g6vm-3ch8-c6jq
PyPI apache-iotdb < 0.13.1 0.13.1 PYSEC-2022-43069

References