Apache Pulsar Authorization Issues Vulnerability

Apache Pulsar is the United States Apache (Apache) Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication, with strong consistency, high throughput and low latency highly scalable streaming data storage characteristics. An authorization issue vulnerability exists in Apache Pulsar, which stems from improper privilege management in the program, and can be exploited by an authenticated attacker with a custom HTTP header to generate messages to any topic using the agent’s administrative role.