PT-2023-19810 · Apache · Apache Iotdb

Jialin Qiao · Publicado 2023-01-30 · Atualizado 2025-03-28 · CVE-2023-24830

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache IoTDB versions 0.13.0 through 0.13.2

Description The issue is related to an Improper Authentication vulnerability in the Apache Software Foundation Apache IoTDB, specifically affecting the iotdb-web-workbench component. This vulnerability may allow unauthorized access.

Recommendations For Apache IoTDB versions 0.13.0 through 0.13.2, update to version 0.13.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the iotdb-web-workbench component until a patch is applied.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-24830

GHSA-PP4W-9X82-6R47

PYSEC-2023-6

Produtos afetados

Apache Iotdb

Referências · 9

• https://github.com/apache/iotdb · Nota
• https://osv.dev/vulnerability/GHSA-pp4w-9x82-6r47 · Aviso do Fabricante
• https://t.me/cvenotify/45793 · Publicação no Telegram
• https://t.me/cibsecurity/57169 · Publicação no Telegram
• https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-24830 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-24830 · Aviso do Fabricante
• https://t.me/cvenotify/116778 · Publicação no Telegram
• https://osv.dev/vulnerability/PYSEC-2023-6 · Aviso do Fabricante