Lucene search
K

EUVD-2023-2679

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 1 Views

Authorization Bypass vulnerability in Apache ZooKeeper allows unauthorized cluster access if misconfigured.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed
15 Nov 202313:37
ibm
IBM Security Bulletins
Security Bulletin: IBM Event Streams is affected by authorization bypass through user-controlled key vulnerability ( CVE-2023-44981).
15 Mar 202406:26
ibm
IBM Security Bulletins
Security Bulletin: Vulnerabilities in Apache ZooKeeper affect IBM watsonx.data
25 Sep 202418:46
ibm
IBM Security Bulletins
Security Bulletin: User Behavior Analytics application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities
10 May 202415:38
ibm
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
2 Aug 202515:58
ibm
IBM Security Bulletins
Security Bulletin: IBM Asset Data Dictionary Component uses zookeeper-3.5.9.jar and snappy-java-1.1.8.3.jar which are vulnerable to CVE-2023-44981,CVE-2023-34453, CVE-2023-34455 , CVE-2023-34454 and CVE-2023-43642
7 Jun 202406:44
ibm
IBM Security Bulletins
Security Bulletin: Vulnerability in ZooKeeper affects IBM Process Mining CVE-2023-44981
16 Jan 202420:21
ibm
IBM Security Bulletins
Security Bulletin: IBM Db2 Web Query for i is vulnerable to a remote attacker bypassing security restrictions or to denial of service.
14 Mar 202414:17
ibm
IBM Security Bulletins
Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities
20 Jun 202416:51
ibm
IBM Security Bulletins
Security Bulletin: IBM Security Guardium is affected by multiple vulnerabilities (CVE-2017-5637, CVE-2019-0201, CVE-2018-8012, CVE-2023-44981)
8 Oct 202418:03
ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "a3d26422-42b8-3cb9-83b4-3b629644ef43",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "23a49ec0-55eb-3b76-bc3c-2ae1afbd795b",
        "product": {
          "name": "Apache ZooKeeper"
        },
        "product_version": "0 <3.7.0"
      },
      {
        "id": "392e2e8b-904a-3d41-a597-dd72adea0a03",
        "product": {
          "name": "Apache ZooKeeper"
        },
        "product_version": "3.7.0 ≤3.7.1"
      },
      {
        "id": "6a17c547-f860-3d9f-9090-a3f76f7f24b7",
        "product": {
          "name": "Apache ZooKeeper"
        },
        "product_version": "3.9.0 <3.9.1"
      },
      {
        "id": "c63bbadb-aea7-3f22-b87a-f79de058db35",
        "product": {
          "name": "Apache ZooKeeper"
        },
        "product_version": "3.8.0 ≤3.8.2"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
7High risk
Vulners AI Score7
CVSS 3.19.1
EPSS0.00025
SSVC
1