Description
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3.
Attackers could login without authorization. This is fixed in 0.13.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache IoTDB | 0.13.0 – ≤ 0.13.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.iotdb:iotdb-grafana-connector | >= 0.13.0, < 0.13.4 | 0.13.4 | GHSA-pvjv-386f-c8wh |
| PyPI | apache-iotdb | >= 0.13.0, < 0.13.5 | 0.13.5 | PYSEC-2023-7 |
References
- https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l vendor-advisory