You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
See doc/triage.md for instructions on how to triage this report.
modules:
- module: TODO
versions:
- fixed: 1.7.6
packages:
- package: github.com/influxdata/influxdb/services/httpd
description: InfluxDB before 1.7.6 has an authentication bypass vulnerability in the
authenticate function in services/httpd/handler.go because a JWT token may have
an empty SharedSecret (aka shared secret).
cves:
- CVE-2019-20933
ghsas:
- GHSA-2rmp-fw5r-j5qv
The text was updated successfully, but these errors were encountered:
In GitHub Security Advisory GHSA-2rmp-fw5r-j5qv, there is a vulnerability in the following Go packages or modules:
See doc/triage.md for instructions on how to triage this report.
The text was updated successfully, but these errors were encountered: