Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-69468
HistorySep 28, 2022 - 12:00 a.m.

Apache Pulsar Trust Management Issue Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
4

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Apache Pulsar is an Apache Foundation distributed messaging platform for cloud environments that integrates messaging, storage, and lightweight functional computing. The software supports multi-tenancy, persistent storage, multi-room cross-regional data replication, with strong consistency, high throughput and low latency of highly scalable streaming data storage features. Apache Pulsar has a security vulnerability that can be exploited by attackers to achieve man-in-the-middle attacks through the Proxy.

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Related for CNVD-2022-69468