CVE-2022-38370

published 2022-09-05

CVE-2022-38370: Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	iotdb	—	—
apache_software_foundation	apache_iotdb	—	—

CWE-862