Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-1952

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wc6f-cjcp-cc33

Improper Certificate Validation in Apache IoTDB An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.

gitlab/maven/org.apache.iotdb/iotdb-parent/CVE-2020-1952

Improper Certificate Validation An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.

gitlab/maven/org.apache.iotdb/iotdb-server/CVE-2020-1952

Improper Certificate Validation When starting IoTDB, the JMX port is exposed with no certification. Then, clients could execute code remotely.