CVE-2023-24831

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@apache.org

Published

2023-04-17

Last modified

2024-10-21

Weaknesses

CWE-287

Affected products

• Iotdb (Apache)
• Apache Iotdb (Apache Software Foundation)

References

• https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l