Skip to content
OpenAdvisories

Product · Apache

Kafka

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-12399

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka

    When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a con…

    Apache Kafka org.apache.kafka:kafka Maven
  • High 8.8
    CVE-2018-17196

    Improper Input Validation in Apache Kafka

    In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction/idempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vu…

    Apache Kafka org.apache.kafka:kafka Maven