Apache IoTDB: Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditor
Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB.
6 records
Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB.
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache IoTDB.
Uncontrolled Recursion, Uncontrolled Resource Consumption vulnerability in Apache IoTDB.
Memory Allocation with Excessive Size Value, Allocation of Resources Without Limits or Throttling, Missing Authentication for Critical Function vulnerability in Apache IoTDB.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB.
Insufficient Session Expiration, Authentication Bypass by Capture-replay vulnerability in Apache IoTDB.