1385 matches found
GHSA-2X2G-32R7-P4X8 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, druid, thingsboard, logstash, apache-nifi...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: strimzi-kafka-operator, druid, thingsboard, logstash, apache-nifi...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: apache-nifi, logstash, strimzi-kafka-operator, thingsboard, druid...
CVE-2024-31141
Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...
CVE-2024-31141
CVE-2024-31141 affects Apache Kafka Clients (2.3.0–3.7.0, including 3.5.2 and 3.6.2) with ConfigProvider plugins that read from disk or environment variables via FileConfigProvider/DirectoryConfigProvider/EnvVarConfigProvider. The root cause is improper privilege management that allows untrusted ...
CVE-2024-31141 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...
CVE-2024-31141 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...
CVE-2024-31141 Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider
Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for customizing behavior, and includes ConfigProvider plugins in order to manipulate these configurations. Apache Kafka also...
Apache Kafka 安全漏洞
Apache Kafka is an open source distributed streaming platform from the Apache Foundation in the United States. The platform is capable of acquiring real-time data for building applications that react in real time to changes in the data stream. An authorization issue vulnerability exists in Apache...
Moderate: Red Hat Security Advisory: Streams for Apache Kafka 2.8.0 release and security update
Streams for Apache Kafka 2.8.0 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
kroxylicious: Missing upstream Kafka TLS hostname verification
A flaw was found in Kroxylicious. When establishing the connection with the upstream Kafka server using a TLS secured connection, Kroxylicious fails to properly verify the server's hostname, resulting in an insecure connection. For a successful attack to be performed, the attacker needs to perfor...
This Week in Spring - October 29th, 2024
Hi, Spring fans! How're things? It's almost Halloween! I'm so excited! I'm going as a PHP program. Boooooooo...t. I'm writing this from the amazing Vaadin Create conference in Frankfurt, Germany, about to do my keynote for an amazing, Spring-loving audience here. So, without further ado, let's di...
GHSA-QH8G-58PP-2WXH vulnerabilities
Vulnerabilities for packages: zookeeper, confluent-kafka-jre-bcfips, spark, trino, spark-kubernetes-operator, kayenta-fips, zookeeper-fips, pinot-fips, hadoop-client-modules, celeborn, cloudwatch-exporter, cruise-control-fips, pinot, spark-kubernetes-operator-fips, strimzi-kafka-operator-fips,...
GHSA-G8M5-722R-8WHQ vulnerabilities
Vulnerabilities for packages: apache-nifi, zookeeper, strimzi-kafka-operator, confluent-kafka-jre-bcfips, kafka, zookeeper-fips, solr, spark-fips, celeborn, cloudwatch-exporter, druid, spark, apache-tika, confluent-kafka, cassandra-reaper...
CVE-2024-8184 vulnerabilities
Vulnerabilities for packages: apache-nifi, zookeeper, strimzi-kafka-operator, confluent-kafka-jre-bcfips, kafka, zookeeper-fips, solr, spark-fips, celeborn, cloudwatch-exporter, druid, spark, apache-tika, confluent-kafka, cassandra-reaper...
CVE-2024-6763 vulnerabilities
Vulnerabilities for packages: zookeeper, confluent-kafka-jre-bcfips, spark, trino, spark-kubernetes-operator, kayenta-fips, zookeeper-fips, pinot-fips, hadoop-client-modules, celeborn, cloudwatch-exporter, cruise-control-fips, pinot, spark-kubernetes-operator-fips, strimzi-kafka-operator-fips,...
GHSA-78WR-2P64-HPWJ vulnerabilities
Vulnerabilities for packages: zookeeper, confluent-kafka-jre-bcfips, hadoop-fips, sonarqube, druid, logstash, strimzi-kafka-operator, kafka, management-api-for-apache-cassandra-4.0, zookeeper-fips, opensearch, hadoop-client-modules, celeborn, management-api-for-apache-cassandra-5.0,...
CVE-2024-47554 vulnerabilities
Vulnerabilities for packages: zookeeper, confluent-kafka-jre-bcfips, hadoop-fips, sonarqube, druid, logstash, strimzi-kafka-operator, kafka, management-api-for-apache-cassandra-4.0, zookeeper-fips, opensearch, hadoop-client-modules, celeborn, management-api-for-apache-cassandra-5.0,...
GHSA-735F-PC8J-V9W8 vulnerabilities
Vulnerabilities for packages: thingsboard, confluent-kafka-jre-bcfips, ruby3.4-fluentd-kubernetes-daemonset, hadoop-fips, ruby3.2-fluentd-kubernetes-daemonset, druid, trino, ruby3.3-fluentd-kubernetes-daemonset, hadoop-thirdparty, kafka, knative-kafka-broker, elasticsearch, opensearch,...