| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/influxdata/influxdb | < 1.7.6 | 1.7.6 |
| influxdb | < 1.7.6 | 1.7.6 |
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free