Description
An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.
Remediation
References
https://lists.apache.org/thread.html/r3d2ff899ead64d2952fdc1fbb1f520ca42011ed2b4c7f786e921f6b9%40%3Cdev.iotdb.apache.org%3E
Related Vulnerabilities
CVE-2020-1714 Vulnerability in maven package org.keycloak:keycloak-common
CVE-2021-41182 Vulnerability in maven package org.webjars:jquery-ui
CVE-2023-31065 Vulnerability in maven package org.apache.inlong:manager-service
CVE-2018-19837 Vulnerability in npm package node-sass
CVE-2021-31811 Vulnerability in maven package org.apache.pdfbox:pdfbox