Vulnerability GHSA-5fc3-pqf2-57cx
Medium Risk
MEDIUM RISK
CVSS Score: 6.0
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
May 14, 2025 at 12:31 PM UTC
Apache IoTDB Discloses Sensitive Information via Log Files
0.10.0 - 1.3.3 and 2.0.1b0
0.10.0 - 1.3.3 and 2.0.1b0
Summary
Apache IoTDB Discloses Sensitive Information via Log Files
Details
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.
This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.
Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2079
1.3.3 - 2.0.6 PYSEC-2026-2079
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2080
1.3.3 - 2.0.6 PYSEC-2026-2080
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2081
1.3.3 - 2.0.6 PYSEC-2026-2081
Medium Risk
1 year ago
Apache IoTDB: Deserialization of untrusted Data
1.0.0 - 2.0.4 GHSA-776q-jw43-fhjx
1.0.0 - 2.0.4 GHSA-776q-jw43-fhjx
Medium Risk
1 year ago
No summary available
1.0.0 - 2.0.4 PYSEC-2025-88
1.0.0 - 2.0.4 PYSEC-2025-88
Impacted packages
Timeline
Published
1 year ago
May 14, 2025 at 12:31 PM UTC
Fixed (1.3.4)
1 year ago
April 17, 2025 at 03:04 PM UTC
Fixed (2.0.2)
1 year ago
April 17, 2025 at 03:14 PM UTC
Fixed (1.3.4)
Unknown
Unknown
Fixed (2.0.2)
Unknown
Unknown
Last Modified
1 year ago
July 02, 2025 at 02:56 PM UTC