Beveiligingsadvies

CVE-2026-40452

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-10 07:16:05

Laatst bijgewerkt 2026-07-10 17:55:35

Toegewezen door apache

CVSS-score 7.5

Status PUBLISHED

Beschrijving

Incorrect Authorization, Improper Access Control vulnerability in Apache IoTDB. Authorization bypass in /rest/v2/fastLastQuery exposes last-value data to unauthorized authenticated users. This issue affects Apache IoTDB: from 1.3.5 before 1.3.8, from 2.0.5 before 2.0.10. Users are recommended to upgrade to version 2.0.10, which fixes the issue.

← Alle CVE's bekijken Bekijk op cve.org ↗