CyberSecBulletin

Influxdata vulnerabilities

We track 2 vulnerabilities in Influxdata products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 21, 2024.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest Influxdata vulnerabilities

  • 9.1 Critical severity

    influxdb: Insecure Storage of Sensitive Information

    CVE-2024-30896InfluxdataEPSS 5.31%

    InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, E

  • 9.8 Critical severity

    Influxdb: Incorrect Default Permissions

    CVE-2022-36640InfluxdataEPSS 2.57%

    influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deplo