Executive brief
Withdrawn Advisory: Apache IoTDB contains Improper Authentication
Affected products
- Maven org.apache.iotdb:iotdb-parent
- PyPI apache-iotdb
Junglewise Threat Intelligence
CVE-2023-24830: Withdrawn Advisory: Apache IoTDB contains Improper Authentication
CVE-2023-24830 · Severity: low · CVSS 3.1 · Published 2023-01-30
Technologies: org.apache.iotdb:iotdb-parent (Maven), apache-iotdb (PyPI). Vendors: Maven, PyPI.
Related threats
- Apache IoTDB path traversal in DataNode RPC interface
- Apache IoTDB authentication bypass in Thrift RPC query handlers
- Apache IoTDB uncontrolled resource consumption in query interface
- Apache IoTDB insecure deserialization in external input processing
- PYSEC-2025-60 - Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuth