CVE-2025-26795: Apache Software Foundation Apache IoTDB JDBC driver

Описание

Оригинално описание

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.

Засегнати продукти

• Apache Software Foundation Apache IoTDB JDBC driver: 0.10.0 до 1.3.3; 2.0.1-beta преди 2.0.2

Вид слабост

• CWE-200 Разкриване на чувствителна информация пред неоторизирана страна
• CWE-532 Insertion of Sensitive Information into Log File

История

Други уязвимости в Apache Software Foundation Apache IoTDB JDBC driver

• 7.5CVE-2026-41114

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-26795
• https://nvd.nist.gov/vuln/detail/CVE-2025-26795
• https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91
• http://www.openwall.com/lists/oss-security/2025/05/14/3