7.5Yüksek
CVE-2025-26795Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver
Açıklama
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Apache Software Foundation | Apache IoTDB JDBC driver | 0.10.0 – ≤ 1.3.3, 2.0.1-beta – < 2.0.2 | |
| apache | iotdb | 0.10.0 – < 1.3.4 |
Kaynaklar ve yamalar
- https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91 vendor-advisoryMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2025/05/14/3 Mailing ListThird Party Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*≥ 0.10.0 < 1.3.4cpe:2.3:a:apache:iotdb:*:*:*:*:*:*:*:*≥ 2.0.1 < 2.0.2