Insufficiently Protected Credentials

Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials via the storm.zookeeper.topology.auth.payload configuration parameter. An attacker can gain unauthorized access to sensitive ZooKeeper credentials by obtaining read-only topology permissions or...