Most recent entries from all

bdu:2021-01905

cnvd-2022-06547

EUVD-2026-60357

fkie_cve-2019-20933

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

GHSA-2rmp-fw5r-j5qv — Improper Authentication in InfluxDB

Affected: Go: github.com/influxdata/influxdb

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in `services/httpd/handler.go` because a JWT token may have an empty SharedSecret (aka shared secret).

gsd-2019-20933

UBUNTU-CVE-2019-20933

Affected: Ubuntu:18.04:LTS: influxdb, Ubuntu:20.04:LTS: influxdb, Ubuntu:22.04:LTS: influxdb

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).