CVE-2026-59562 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Apache IoTDB: Remote code execution and Unauthenticated path traversal in legacy pipe sendFile RPC

Missing authentication for critical function vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 2.0.0 before 2.0.11. Users are recommended to upgrade to version 2.0.11, which fixes the issue.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-306	Missing Authentication for Critical Functionality The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

참고 자료

https://lists.apache.org/thread.html/6035x52ct37d03xllc9rw1y5q1zzqthl
Tags : vendor-advisory