CVE-2023-29471

Lightbend Alpakka Kafka before 5.0.0 logs its configuration as debug information, and thus log files may contain credentials if plain cleartext login is configured. This occurs in akka.kafka.internal.KafkaConsumerActor...

Security Bulletin: IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities.

Summary IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities, listed in the CVEs below. Vulnerability Details CVEID:CVE-2023-32007 DESCRIPTION: Apache Spark could allow a remote authenticated attacker to execute arbitrary commands on the...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (2.0.5) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (2.0.5)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 2.0.5 Source cves: CVE-2023-29471...

com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.13 (3.0.0-rc1), com.typesafe.akka:akka-stream-kafka-testkit_2.13 (3.0.0-rc1) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.13 (3.0.0-rc1)

com.typesafe.akka:akka-stream-kafka2.13 MAVEN version 3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.13 and may be impacted: - com.typesafe.akka:akka-stream-kafka-cluster-sharding2.13 3.0.0-rc1 -...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (2.0.3) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (2.0.3)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 2.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 2.0.3 Source cves: CVE-2023-29471...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (1.0.5) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.0.5)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 1.0.5 Source cves: CVE-2023-29471...

com.lightbend.lagom:lagom-javadsl-integration-client_2.11 (1.5.0-rc2), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.11 (1.5.0-rc2) +7 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.0-rc2)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.11 1.5.0-rc2 -...

com.typesafe.akka:akka-stream-kafka-testkit_2.11 (1.1.0-rc2) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.1.0-rc2)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.11 1.1.0-rc2 Source cves:...

com.github.vonnagy:service-container-examples_2.12 (2.0.6), net.asynchorswim:fusion_2.12 (>=1.0.4, <=1.1.3) +1 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (0.16)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 0.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.github.vonnagy:service-container-examples2.12 2.0.6 -...

com.lightbend.akka:akka-projection-kafka_2.13 (>=1.0.0-rc1, <=1.0.0-rc3), com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.13 (2.0.4) +3 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.13 (2.0.4)

com.typesafe.akka:akka-stream-kafka2.13 MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.13 and may be impacted: - com.lightbend.akka:akka-projection-kafka2.13 =1.0.0-rc1, =0.7.3, =0.7.3, =0.9.0...

nl.tradecloud:kafka-akka-extension_2.11 (>=0.50, <=0.52.2) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (0.19)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 0.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - nl.tradecloud:kafka-akka-extension2.11 =0.50, =0.52.2 Source cves: CVE-2023-29471...

com.typesafe.akka:akka-stream-kafka-testkit_2.12 (2.0.1) potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (2.0.1)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.typesafe.akka:akka-stream-kafka-testkit2.12 2.0.1 Source cves: CVE-2023-29471...

com.lightbend.lagom:lagom-javadsl-integration-client_2.12 (1.4.0-m3), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.12 (1.4.0-m3) +6 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (0.17)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 0.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.12 1.4.0-m3 -...

com.lightbend.lagom:lagom-javadsl-integration-client_2.12 (1.5.0-rc2), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.12 (1.5.0-rc2) +8 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (1.0-rc2)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 1.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.12 1.5.0-rc2 -...

com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.12 (2.1.0), com.typesafe.akka:akka-stream-kafka-testkit_2.12 (2.1.0) +3 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (2.1.0)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.typesafe.akka:akka-stream-kafka-cluster-sharding2.12 2.1.0 -...

com.lightbend.akka:akka-projection-kafka_2.12 (>=1.3.0-m2, <=1.3.0-m3), com.typesafe.akka:akka-stream-kafka-cluster-sharding_2.12 (3.1.0-m1) +1 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (3.1.0-m1)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 3.1.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.akka:akka-projection-kafka2.12 =1.3.0-m2, =1.3.0-m3 -...

com.lightbend.lagom:lagom-javadsl-integration-client_2.11 (1.4.0-m1), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.11 (1.4.0-m1) +5 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (0.15)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 0.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.11 1.4.0-m1 -...

com.lightbend.lagom:lagom-javadsl-integration-client_2.11 (1.5.0-rc1), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.11 (1.5.0-rc1) +7 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.11 (1.0-m1)

com.typesafe.akka:akka-stream-kafka2.11 MAVEN version 1.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.11 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.11 1.5.0-rc1 -...

com.lightbend.lagom:lagom-javadsl-integration-client_2.13 (1.6.0-m4), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.13 (1.6.0-m4) +8 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.13 (1.0.4)

com.typesafe.akka:akka-stream-kafka2.13 MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.13 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.13 1.6.0-m4 -...

com.lightbend.lagom:lagom-javadsl-integration-client_2.12 (>=1.6.0-m2, <=1.6.0-m3), com.lightbend.lagom:lagom-javadsl-kafka-broker_2.12 (>=1.6.0-m2, <=1.6.0-m3) +8 more potentially affected by CVE-2023-29471 via com.typesafe.akka:akka-stream-kafka_2.12 (1.0.3)

com.typesafe.akka:akka-stream-kafka2.12 MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-stream-kafka2.12 and may be impacted: - com.lightbend.lagom:lagom-javadsl-integration-client2.12 =1.6.0-m2, =1.6.0-m2,...