CVE-2025-26864
Published May 14, 2025
Last updated a month ago
- Description
- Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB. This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.
- Source
- security@apache.org
- NVD status
- Awaiting Analysis
- security@apache.org
- CWE-200
- Hype score
- Not currently trending
CVE-2025-26864 Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB. T… https://t.co/5fa5zrziyE
@CVEnew
14 May 2025
196 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Apache IoTDB CVE-2024-24780: Remote Code Execution with untrusted URI of User-defined function https://t.co/f4LTYkW4vS CVE-2025-26795: Exposure of Sensitive Info in JDBC driver https://t.co/WhLsCD10wT CVE-2025-26864: Exposure of Sensitive Info in OpenID https://t.co/wsJj11v6xJ
@oss_security
14 May 2025
184 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes