Beveiligingsadvies

CVE-2026-40009

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-10 07:15:07

Laatst bijgewerkt 2026-07-10 17:56:44

Toegewezen door apache

CVSS-score 6.5

Status PUBLISHED

Beschrijving

Improper Privilege Management, Improper Access Control vulnerability in Apache IoTDB. Authenticated users can escalate to full tree-path access by renaming themselves to __internal_auditor. This issue affects Apache IoTDB: from 2.0.8 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗