Threats tagged 'ghsa-qhh3-6vw4-44c4'

An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service affecting versions from 2.0.0 up to but not including 2.0.11. This flaw allows unauthenticated attackers to bypass authentication controls, potentially leading to full compromise of confidentiality, integrity, and availability. The issue is fixed in version 2.0.11, and users are strongly advised to upgrade to this version to mitigate the risk.