Apache IoTDB JDBC Driver Discloses Sensitive Information via Log Files
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-26795US | — | — | ||
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver.
This issue affects iotdb-jd… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2025/05/14/3WEB
- https://github.com/apache/iotdbPACKAGE
- https://github.com/apache/iotdb/commit/34fcaff6b72470d5ad369307dde7fae8897aea7eWEB
- https://github.com/apache/iotdb/commit/8e61e3072ab9ee9a1bbf6c3230014111965462bfWEB
- https://github.com/apache/iotdb/pull/14857WEB
- https://github.com/apache/iotdb/pull/14863WEB
- https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91WEB
- https://nvd.nist.gov/vuln/detail/CVE-2025-26795ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan