Skip to content
OpenAdvisories

Package · Maven

org.apache.pulsar:pulsar-client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2022-33681

    Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM

    Delayed TLS hostname verification in the Pulsar Java Client and the Pulsar Proxy make each client vulnerable to a man in the middle attack. Connections from the Pulsar Java Client to the Pulsar Broker/Proxy and connections from the Pulsar Proxy to the Pulsar …

    Apache Software Foundation Apache Pulsar org.apache.pulsar:pulsar-client Maven