Approved changes feed: RSS · Atom

cpe:2.3:a:apache:iotdb:2.0.1:beta:*:*:*:*:*:*

part: a version: 2.0.1 update: beta

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductIotdb (b596d85f-dcd9-504d-99dc-2104d0e7758b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/iotdb purl2cpe 2026-06-01 10:14:29.891781
pkg:docker/apache/iotdb purl2cpe 2026-06-01 10:14:29.891782
pkg:github/apache/iotdb purl2cpe 2026-06-01 10:14:29.891783

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-26864 vulnerable 2026-06-08 07:14:50.585046 Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB. This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 1.3.4 and 2.0.2, which fix the issue.
Published: 2025-05-14T10:44:12.712Z
Updated: 2025-05-19T18:41:38.927Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.