Influxdb vulnerabilities

2 known vulnerabilities in Influxdb from Influxdata. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  influxdb: Insecure Storage of Sensitive Information

  CVE-2024-30896Nov 21, 2024InfluxdataEPSS 5.31%

  InfluxDB OSS 2.x through 2.7.11 stores the administrative operator token under the default organization which allows authorized users with read access to the authorization resource of the default organization to retrieve the operator token. InfluxDB OSS 1.x, E

• 9.8 Critical severity

  Influxdb: Incorrect Default Permissions

  CVE-2022-36640Sep 2, 2022InfluxdataEPSS 2.57%

  influxData influxDB before v1.8.10 contains no authentication mechanism or controls, allowing unauthenticated attackers to execute arbitrary commands. NOTE: the CVE ID assignment is disputed because the vendor's documentation states "If InfluxDB is being deplo