Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/09/11 8:44 p.m.•17 views

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

Vulnerability ZooKeeperReplicationConfig.secret silently substitutes the hard-coded constant "ch4n63m3" leetspeak for "change me" whenever the operator omits replication.secret. The same secret is wired into both the client-facing SASL context and the quorum/learner SASL contexts of the embedded...

9.4CVSS6AI score0.00229EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder