Threat database

CVE-2024-30896 is a critical vulnerability in InfluxDB OSS 2.x up to version 2.7.11 where the administrative operator token is stored under the default organization. Authorized users with read access to the authorization resource of the default organization can retrieve this operator token. This issue does not affect InfluxDB OSS 1.x, Enterprise, Cloud, Cloud Dedicated, or Clustered versions. The vendor has indicated that this behavior is by design for the organizations feature but plans to remove token retrieval via the API in a future release. InfluxDB 2.8.