Lucene search
K

4 matches found

Veracode
Veracode
added 2024/06/19 4:34 a.m.22 views

Missing Authentication

io. strimzi, strimzi is vulnerable to Missing Authentication. The vulnerability is due to improper access control implementation in the Kafka Connect REST API within the STRIMZI Project. The vulnerability allows attackers to exploit the API to potentially deny service for Kafka Mirroring, mirror...

9.8CVSS6.7AI score0.00524EPSS
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2024/06/17 9:31 p.m.17 views

STRIMZI incorrect access control

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector bypassing Kafka ACL if it exists, and potentially stea...

9.8CVSS7AI score0.00524EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2024/06/17 7:15 p.m.31 views

CVE-2024-36543

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector bypassing Kafka ACL if it exists, and potentially stea...

9.8CVSS0.00524EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/17 12:0 a.m.13 views

CVE-2024-36543

Incorrect access control in the Kafka Connect REST API in the STRIMZI Project 0.41.0 and earlier allows an attacker to deny the service for Kafka Mirroring, potentially mirror the topics' content to his Kafka cluster via a malicious connector bypassing Kafka ACL if it exists, and potentially stea...

7.1AI score0.00524EPSS
Exploits0References1
Rows per page
Query Builder