GHSA-G93M-8X6H-G5GV Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

UBUNTU-CVE-2024-51504

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504 Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504 Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504 Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504

The ZooKeeper Admin Server is vulnerable to an Authentication Bypass by Spoofing (CWE-290) due to a weak default configuration in the IPAuthenticationProvider . Specifically, the provider honors the X-Forwarded-For HTTP request header, which can be easily spoofed by an attacker to bypass IP-based...

CVE-2024-51504

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

CVE-2024-51504: Authentication Bypass by Spoofing

When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which...

Apache Zookeeper security vulnerabilities

Apache ZooKeeper is a centralized service under the Apache Software Foundation for maintaining configuration information, naming, providing distributed synchronization, and providing group services. An authentication bypass vulnerability exists in Apache ZooKeeper versions prior to 3.9.3. The...

Net Titanium Technology idcCMS Security Breach

Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in Net Titanium Technology idcCMS v1.35, which was discovered to contain a cross-site...

com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter (1.0.4), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-starter-example (1.0.4) +27 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.4.4.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.4.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: -...

com.vilt-group.minium:minium-app (0.9.6), de.codecentric:jbehave-admin-server (>=0.0.1, <=0.0.2) +6 more potentially affected by CVE-2023-34055 via org.springframework.boot:spring-boot-actuator (1.1.7.release)

org.springframework.boot:spring-boot-actuator MAVEN version 1.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.boot:spring-boot-actuator and may be impacted: - com.vilt-group.minium:minium-app 0.9.6 -...

de.codecentric:spring-boot-admin-example (1.0.2) potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.0.2)

de.codecentric:spring-boot-admin-server MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.2 Source cves: CVE-2023-38286 Source...

de.codecentric:spring-boot-admin-example (1.0.4) potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.0.4)

de.codecentric:spring-boot-admin-server MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.4 Source cves: CVE-2023-38286 Source...

de.codecentric:spring-boot-admin-example (1.0.5) potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.0.5)

de.codecentric:spring-boot-admin-server MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-example 1.0.5 Source cves: CVE-2023-38286 Source...

de.codecentric:spring-boot-admin-sample (1.2.0), de.codecentric:spring-boot-admin-sample-discovery (1.2.0) +1 more potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.2.0)

de.codecentric:spring-boot-admin-server MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-sample 1.2.0 -...

de.codecentric:spring-boot-admin-sample (1.2.3), de.codecentric:spring-boot-admin-sample-discovery (1.2.3) +1 more potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.2.3)

de.codecentric:spring-boot-admin-server MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-sample 1.2.3 -...

de.codecentric:spring-boot-admin-sample (1.2.4), de.codecentric:spring-boot-admin-sample-discovery (1.2.4) +2 more potentially affected by CVE-2023-38286 via de.codecentric:spring-boot-admin-server (1.2.4)

de.codecentric:spring-boot-admin-server MAVEN version 1.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on de.codecentric:spring-boot-admin-server and may be impacted: - de.codecentric:spring-boot-admin-sample 1.2.4 -...