Lucene search
MitreCVELIST:CVE-2024-36543HistoryJun 17, 2024 - 12:00 a.m.
CVE-2024-36543
2024-06-1700:00:00
mitre
www.cve.org
11
access control
kafka connect
rest api
denial of service
unauthorized mirroring
credential theft
EPSS
0
Percentile
9.0%
Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics’ content to his Kafka cluster via a malicious connector (bypassing Kafka ACL if it exists), and potentially steal Kafka SASL credentials, by querying the MirrorMaker Kafka REST API.
Related
cve
cve
CVE-2024-36543
2024-06-17 19:15:58
vulnrichment
vulnrichment
CVE-2024-36543
2024-06-17 00:00:00
veracode
veracode
Missing Authentication
2024-06-19 04:34:21
github
github
STRIMZI incorrect access control
2024-06-17 21:31:10
osv
osv
STRIMZI incorrect access control
2024-06-17 21:31:10
nvd
nvd
CVE-2024-36543
2024-06-17 19:15:58