Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47623
HistoryJun 19, 2024 - 4:34 a.m.

Missing Authentication

2024-06-1904:34:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
strimzi
authentication
kafka mirroring
access control lists

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

io. strimzi, strimzi is vulnerable to Missing Authentication. The vulnerability is due to improper access control implementation in the Kafka Connect REST API within the STRIMZI Project. The vulnerability allows attackers to exploit the API to potentially deny service for Kafka Mirroring, mirror topics’ content to their own Kafka cluster using a malicious connector and bypass Kafka ACLs (Access Control Lists) due to a lack of authentication.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%