Not rated
CVE-2025-26795 Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File…
Description
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache IoTDB JDBC driver 2.0 | 2.0.1-beta → < 2.0.2 | 2.0.2 |
| Apache IoTDB JDBC driver 0.10 | 0.10.0 → 1.3.3 | No fix stated |