Lucene search

K

CVE-2023-51437

🗓️ 07 Feb 2024 10:08:15Reported by apacheType 
cve
 cve
🔗 web.nvd.nist.gov👁 39 Views

Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider allows signature forgery. Upgrade to v2.11.3, 3.0.2, or 3.1.1. Update saslJaasServerRoleTokenSignerSecretPath. Affected components: Pulsar Broker, Proxy, Websocket Proxy, Function Worker

Show more
Related
Detection
Affected
Refs
Nvd
Vulners
Node
apachepulsarRange2.10.5
OR
apachepulsarRange2.11.02.11.3
OR
apachepulsarRange3.0.03.0.2
OR
apachepulsarMatch3.1.0-
OR
apachepulsarMatch3.1.0candidate_1
[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Pulsar",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "2.10.5",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2.11.2",
        "status": "affected",
        "version": "2.11.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "3.0.1",
        "status": "affected",
        "version": "3.0.0",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "3.1.0"
      }
    ]
  }
]

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
07 Feb 2024 10:15Current
7.2High risk
Vulners AI Score7.2
CVSS37.4
EPSS0.001
SSVC
39
.json
Report