CVE-2023-24830

CWE-287 — Improper Authentication4 documents4 sources

Severity

7.5HIGH

EPSS

1.5%

top 18.66%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Apache Software Foundation Apache Iotdb Workbench Apache Iotdb

Timeline

PublishedJan 30

Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5apache_software_foundation/apache_iotdb_workbench0.13.0 — 0.13.3

▶NVDapache/iotdb0.13.0 — 0.13.3

▶PyPIapache-iotdb0.13.0 — 0.13.3

▶Mavenorg.apache.iotdb:iotdb-parent0.13.0 — 0.13.3

🔴Vulnerability Details

GHSA

Withdrawn Advisory: Apache IoTDB contains Improper Authentication↗2023-01-30

▶

CVEList

Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization↗2023-01-30

▶

OSV

CVE-2023-24830: Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB↗2023-01-30

▶