Lucene search
+L

5 matches found

BDU FSTEC
BDU FSTEC
•added 2026/07/27 12:00 a.m.•9 views

Уязвимость компонента ZKConfig централизованной службы для поддержки информации о конфигурации, именования, обеспечения распределенной синхронизации и предоставления групповых служб Apache ZooKeeper, позволяющая нарушителю раскрыть защищаемую информацию

Уязвимость компонента ZKConfig централизованной службы для поддержки информации о конфигурации, именования, обеспечения распределенной синхронизации и предоставления групповых служб Apache ZooKeeper связана с недостатками механизма обработки входных данных, записываемых в системные журналы...

7.8CVSS7.1AI score0.01177EPSS
SaveExploits0References4Affected Software3
Positive Technologies
Positive Technologies
•added 2026/03/10 12:00 a.m.•18 views

PT-2026-24614

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential producti...

7.5CVSS5.8AI score0.01177EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2026/03/07 9:16 a.m.•13 views

CVE-2026-24308

Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the client's logfile. Configuration values are exposed at INFO level logging rendering potential producti...

7.5CVSS6.7AI score0.01177EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/07 12:00 a.m.•24 views

Apache Zookeeper 安全漏洞

Apache Zookeeper is a software project of the Apache Foundation in the United States. It provides open-source distributed configuration services, synchronization services, and naming and registration functions for large-scale distributed computing systems. Versions 3.8.5 and 3.9.4 of Apache...

7.5CVSS7.1AI score0.01177EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/10/08 12:00 a.m.•9 views

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper, allows attackers to execute arbitrary commands.

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used to manage configuration information, name resolution, distributed synchronization, and provide group services for Apache ZooKeeper, stems from improper handling of insufficien...

4.3CVSS6.1AI score0.00315EPSS
SaveExploits0References5Affected Software7
Rows per page
Query Builder