Security Advisory

CVE-2019-20933

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-11-19 01:50:50

Last updated 2024-08-05 03:00:18

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).

← Browse all CVEs View on cve.org ↗