Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2019-1700

Критический

ALT-PU-2019-1700: package influxdb update to version 1.7.6-alt1

Источник
errata.altlinux.org
Дата публикации
20.04.2019
Дата обновления
04.02.2026
Устраненные уязвимости
2

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades influxdb to version 1.7.6-alt1.

Устраненные уязвимости2

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 6 лет назад

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

CVSS3: 8.6
redhat
больше 7 лет назад

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

CVSS3: 9.8
nvd
почти 6 лет назад

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

CVSS3: 9.8
debian
почти 6 лет назад

InfluxDB before 1.7.6 has an authentication bypass vulnerability in th ...

CVSS3: 9.8
github
больше 5 лет назад

Improper Authentication in InfluxDB