Non notée
CVE-2017-12610 In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a…
Description
In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Kafka | Versions non publiées |
Autres CVE de Apache Kafka
Les 23 CVE de Apache Kafka →
CVE-2026-114349
Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches
Non notée
CVE-2026-112375
Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs
Non notée
CVE-2026-116593
Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint
Non notée
CVE-2026-115644
Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions
Non notée