c8-source-c8collection (>=0.0.2 <=0.0.10), macrometa-source-collection (>=0.0.11 <=1.0.6a2) potentially affected by CVE-2022-33684 via pulsar-client (=2.10.1)

🗓️ 04 Nov 2022 19:01:17Reported by Vulners OSVType

Pulsar-client 2.10.1 is vulnerable to CVE-2022-33684; transitive dependencies affected are c8-source-c8collection up to 0.0.10 and macrometa-source-collection up to 1.0.6a2.

Reporter	Title	Published	Views	Family All 18
bdu_fstec	The vulnerabilities of the Pulsar C++ Client and Pulsar Python Client components of the cloud platform for distributed messaging and Apache Pulsar’s streaming communication allow attackers to execute “man-in-the-middle” attacks.	16 Dec 202200:00	–	bdu_fstec
circl	CVE-2022-33684	4 Nov 202215:28	–	circl
cnnvd	Apache Pulsar 信任管理问题漏洞	4 Nov 202200:00	–	cnnvd
cnvd	Apache Pulsar Trust Management Issue Vulnerability (CNVD-2022-83591)	8 Nov 202200:00	–	cnvd
cve	CVE-2022-33684	4 Nov 202200:00	–	cve
cvelist	CVE-2022-33684 Apache Pulsar C++/Python OAuth Clients prior to 3.0.0 were vulnerable to an MITM attack due to Disabled Certificate Validation	4 Nov 202200:00	–	cvelist
huntr	SSL verification omitted in OAuth2 credential flow	10 Mar 202217:24	–	huntr
euvd	EUVD-2022-7246	3 Oct 202520:07	–	euvd
github	Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack	4 Nov 202219:01	–	github
nvd	CVE-2022-33684	4 Nov 202212:15	–	nvd

02 May 2025 22:04Current

7.2High risk

Vulners AI Score7.2

CVSS 3.18.1

EPSS0.00704

SSVC