CVE-2023-25194

🗓️ 07 Feb 2023 19:11:22Reported by apacheType

cve🔗 web.nvd.nist.gov👁 353 Views🌐 WEB

A security vulnerability in Apache Kafka Connect API allows for RCE via LDAP server connection

Reporter	Title	Published	Views	Family All 70
zdt	Apache Druid JNDI Injection Remote Code Execution Exploit	27 Jun 202300:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	7 Mar 202303:26	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-25194)	1 Feb 202413:37	–	ibm
IBM Security Bulletins	Security Bulletin: z/Transaction Processing Facility is affected by vulnerabilities in the Apache Kafka (kafka-clients) and cryptography packages	9 Mar 202314:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to a code execution vulnerability in Apache Kafka (CVE-2023-25194)	17 May 202321:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to kafka-clients	17 Feb 202604:39	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2023	1 Apr 202314:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for Apache Flink	30 Dec 202513:32	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Asset Management application (CVE-2023-25194)	1 Feb 202413:36	–	ibm

NVD

Vulners

Node

apache kafka_connectRange2.3.0–3.3.2

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Kafka Connect API",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.4.0",
        "status": "affected",
        "version": "2.3.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/vy1c7fqcdqvq5grcqp6q5jyyb302khyz
kafka	www.kafka.apache.org/cve-list
packetstormsecurity	www.packetstormsecurity.com/files/173151/Apache-Druid-JNDI-Injection-Remote-Code-Execution.html

Parameter	Position	Path	Description	CWE
config.consumerProperties.sasl.jaas.config	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.history.producer.sasl.jaas.config	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.history.producer.sasl.jaas.config	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.connector.class	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.hostname	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.port	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.user	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.password	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.dbname	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502
config.database.sslmode	request body	/connectors	CVE-2023-25194 JNDI injection via SASL JAAS config in Kafka Connect REST API, enabling deserialization/Gadget chains	CWE-502

17 Jun 2026 05:40Current

8.8High risk

Vulners AI Score8.8

CVSS 3.18.8

EPSS0.9581

SSVC

CWE-502