Skip to content
Advisories.
iotdbPYSEC-2023-6

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3.

UnratedCVE-2023-24830 · Published Jan 30, 2023 · updated Nov 8, 2023

Source advisory

Affected versions

PackageAffectedFixed in
apache-iotdb
PyPI
>= 0.13.0, < 0.13.30.13.3
Details and references

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3.

Severity from
no source yet
Also known as
CVE-2023-24830

More iotdb advisories

All
DateAdvisory
Jan 312023Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 o
CVE-2023-24829Unratedfixed in 0.13.3
Apr 172023Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.
CVE-2023-30771Unratedno fix yet
Apr 172023Apache IoTDB Grafana Connector vulnerable to Improper Authentication
CVE-2023-24831Critical9.8fixed in 0.13.5
Oct 262022Apache IoTDB subject to ReDOS with Java 8
CVE-2022-43766High7.5fixed in 0.13.3
Sep 62022Apache IoTDB Session Fixation vulnerability
CVE-2022-38369Medium8.8fixed in 0.13.1
Jan 152024Remote Code Execution vulnerability in Apache IoTDB via UDF
CVE-2023-46226High9.8fixed in 1.3.0

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.