Lucene search

Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode

🗓️ 12 Apr 2024 09:40:33Reported by GoogleType

osv🔗 osv.dev👁 11 Views

Apache Kafka migration vulnerabilit

Reporter	Title	Published	Views	Family All 17
UbuntuCve	CVE-2024-27309	12 Apr 202400:00	–	ubuntucve
Veracode	Incorrect Access Control	15 Apr 202408:30	–	veracode
OSV	BIT-kafka-2024-27309	16 Apr 202407:20	–	osv
OSV	CGA-8wh3-gh6j-j46h	6 Jun 202412:25	–	osv
OSV	UBUNTU-CVE-2024-27309	23 Sep 202400:00	–	osv
Redos	ROS-20240709-03	9 Jul 202400:00	–	redos
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library is affected by vulnerability in Apache Kafka (CVE-2024-27309)	30 Jul 202413:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to the Apache Kafka (CVE-2024-27309).	23 Jul 202407:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses Kafka - 3.0.2 which is vulnerable to CVE-2024-27309.	20 Jun 202407:43	–	ibm
RedhatCVE	CVE-2024-27309	11 Jun 202420:54	–	redhatcve

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-27309
github	www.github.com/apache/kafka/commit/c000b1fae2bd7d4b76713a53508f128a13431ab6
github	www.github.com/apache/kafka
lists	www.lists.apache.org/thread/6536rmzyg076lzzdw2xdktvnz163mjpy
security	www.security.netapp.com/advisory/ntap-20240705-0002
openwall	www.openwall.com/lists/oss-security/2024/04/12/3

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Apr 2024 09:33Current

6.4Medium risk

Vulners AI Score6.4

CVSS37.4

EPSS0.0004

SSVC