CVE-2022-38369
published 2022-09-05CVE-2022-38369: Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
PriorityP338high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
1.09%
61.7th percentile
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | iotdb | — | — |
| apache_software_foundation | apache_iotdb | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache IoTDB Session Fixation vulnerability
ghsa·2022-09-06
CVE-2022-38369 [MEDIUM] CWE-384 Apache IoTDB Session Fixation vulnerability
Apache IoTDB Session Fixation vulnerability
Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
OSV
Apache IoTDB Session Fixation vulnerability
osv·2022-09-06
CVE-2022-38369 [MEDIUM] Apache IoTDB Session Fixation vulnerability
Apache IoTDB Session Fixation vulnerability
Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
OSV
CVE-2022-38369: Apache IoTDB version 0
osv·2022-09-05
CVE-2022-38369 CVE-2022-38369: Apache IoTDB version 0
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-09-05
Published