Lucene search

Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode

🗓️ 12 Apr 2024 09:40:33Reported by GitHub Advisory DatabaseType

Apache Kafka migration from ZK to KRaft may lead to incorrect access contro

Reporter	Title	Published	Views	Family All 16
Veracode	Incorrect Access Control	15 Apr 202408:30	–	veracode
OSV	BIT-kafka-2024-27309	16 Apr 202407:20	–	osv
OSV	CGA-8wh3-gh6j-j46h	6 Jun 202412:25	–	osv
OSV	Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode	12 Apr 202409:33	–	osv
OSV	UBUNTU-CVE-2024-27309	23 Sep 202400:00	–	osv
Cvelist	CVE-2024-27309 Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode	12 Apr 202406:58	–	cvelist
Vulnrichment	CVE-2024-27309 Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode	12 Apr 202406:58	–	vulnrichment
Chainguard	CVE-2024-27309 vulnerabilities	19 May 202403:07	–	cgr
NVD	CVE-2024-27309	12 Apr 202407:15	–	nvd
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses Kafka - 3.0.2 which is vulnerable to CVE-2024-27309.	20 Jun 202407:43	–	ibm

Vulners

Node

org.apache.kafka kafka-metadataRange3.5.0–3.6.2

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-27309
lists	www.lists.apache.org/thread/6536rmzyg076lzzdw2xdktvnz163mjpy
github	www.github.com/apache/kafka/commit/c000b1fae2bd7d4b76713a53508f128a13431ab6
openwall	www.openwall.com/lists/oss-security/2024/04/12/3
security	www.security.netapp.com/advisory/ntap-20240705-0002
github	www.github.com/advisories/GHSA-79vv-vp32-gpp7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Apr 2024 09:33Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.000

CWE-863