CVE-2019-20933
CRITICAL EXPLOITED NUCLEIInfluxDB < 1.7.6 - Authentication Bypass via Empty JWT SharedSecret
Title source: llmExploitation Summary
CVE-2019-20933 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 3 public exploits from researchers including LorenzoTullini, Hydragyrum, Dungsocool. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2019-20933, an authentication bypass vulnerability in InfluxDB before 1.7.6. The exploit generates a JWT token with an empty SharedSecret and uses it to bypass authentication, allowing unauthorized access to the database.
Description
InfluxDB before 1.7.6 has an authentication bypass vulnerability in the authenticate function in services/httpd/handler.go because a JWT token may have an empty SharedSecret (aka shared secret).
Exploits (3)
This repository contains a functional exploit for CVE-2019-20933, an authentication bypass vulnerability in InfluxDB before 1.7.6. The exploit generates a JWT token with an empty SharedSecret and uses it to bypass authentication, allowing unauthorized access to the database.
This repository contains a functional Python exploit for CVE-2019-20933, an authentication bypass vulnerability in InfluxDB before 1.7.6. The exploit generates a JWT token with an empty SharedSecret and uses it to execute arbitrary queries against the InfluxDB API.
This repository contains a functional Python exploit for CVE-2019-20933, which targets an authentication bypass vulnerability in InfluxDB. The exploit generates a forged JWT token with an empty secret key to bypass authentication and execute arbitrary queries.
Nuclei Templates (1)
InfluxDB || http.title:"influxdb - admin interface" || influxdb
title="influxdb - admin interface"
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H