CVE-2025-26795 — Apache IoTDB JDBC driver: Exposure of Sensitive Information in IoTDB JDBC driver

Description (CNA)

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache IoTDB JDBC driver	affected 0.10.0 through 1.3.3; affected 2.0.1-beta before 2.0.2

CWE

CWE-200, CWE-532

References

https://lists.apache.org/thread/bj0ytxr5wg0c4jw8xm7rhfd8ogho0r91

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/05/14/3

CISA-ADP

No English description supplied.

No references supplied.