CVE-2023-24831

published 2023-04-17

CVE-2023-24831: Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3.

Attackers could login without authorization. This is fixed in 0.13.4.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	iotdb	0.13.0 – 0.13.3	—
apache_software_foundation	apache_iotdb	0.13.0 – 0.13.3	—

CWE-287