Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xwqh-5v9q-g7v9

Опубликовано: 10 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication Accepts Stale Cached Credentials

This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.

Users are recommended to upgrade to version 2.0.10, which fixes the issue.

Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication Accepts Stale Cached Credentials

This issue affects Apache IoTDB: from 1.0.0 before 2.0.10.

Users are recommended to upgrade to version 2.0.10, which fixes the issue.

EPSS

Процентиль: 51%
0.00682
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-294

Связанные уязвимости

CVSS3: 9.8
nvd
2 месяца назад

Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB. REST Basic Authentication Accepts Stale Cached Credentials This issue affects Apache IoTDB: from 1.0.0 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

EPSS

Процентиль: 51%
0.00682
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-294