Package · Maven

org.apache.kafka:kafka_2.10

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2024-56128

Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption

Incorrect Implementation of Authentication Algorithm in Apache Kafka's SCRAM implementation. Issue Summary: Apache Kafka's implementation of the Salted Challenge Response Authentication Mechanism (SCRAM) did not fully adhere to the requirements of RFC 5802 [1…

Apache Software Foundation Apache Kafka strimzi-kafka-operator-kafka-thirdparty-libs-cc strimzi-kafka-operator-kafka-init Wolfi Maven

Dec 18, 2024