PT-2026-24614

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential producti...

CVE-2026-24308

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential producti...

Apache Zookeeper 安全漏洞

Apache Zookeeper is a software project of the Apache Foundation in the United States. It provides open-source distributed configuration services, synchronization services, and naming and registration functions for large-scale distributed computing systems. Versions 3.8.5 and 3.9.4 of Apache...

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper, allows attackers to execute arbitrary commands.

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used to manage configuration information, name resolution, distributed synchronization, and provide group services for Apache ZooKeeper, stems from improper handling of insufficien...