QwikSec

Security Database

CVE

CWE

Training

CVE-2025-26795

Published: May 14, 2025

Modified: May 19, 2025

PUBLISHED

Description

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.

Vendor	Product	Versions
Apache Software Foundation	Apache IoTDB JDBC driver	affected `0.10.0 - <= 1.3.3` affected `2.0.1-beta - < 2.0.2`

Weaknesses (CWE)

References

https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.