Package · Maven

org.apache.pulsar:pulsar-broker-auth-sasl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.4

CVE-2023-51437

Apache Pulsar: Timing attack in SASL token signature verification

Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge a SASL Role Token that will pass signature verification. Users are recommended to upgrade to version 2.11.3, 3.0.2, or 3.1.1 which fixes t…

Apache Software Foundation Apache Pulsar org.apache.pulsar:pulsar-broker-auth-sasl Maven

Feb 7, 2024