Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-20933
9.8
CRITICALCVSS v3
Published
November 19, 2020
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
GitHub