Em resumo
- CVE-2019-20933 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta github.com/influxdata/influxdb, influxdb (influxdata).
- Chance de exploração nos próximos 30 dias (EPSS): 30.9%, maior que 98.3% das vulnerabilidades.
- Correção: atualize para 1.7.6 ou posterior.
Description
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
NVD description
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
Mais vulnerabilidades de github.com/influxdata/influxdb
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free