7.5Alta
CVE-2025-26795Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver
Descripción
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Apache Software Foundation | Apache IoTDB JDBC driver | 0.10.0 – ≤ 1.3.3, 2.0.1-beta – < 2.0.2 | |
| apache | iotdb | 0.10.0 – < 1.3.4 |
Referencias y parches
- https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91 vendor-advisoryMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2025/05/14/3 Mailing ListThird Party Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*≥ 0.10.0 < 1.3.4cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*≥ 2.0.1 < 2.0.2