Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7173
HistoryJul 27, 2018 - 3:15 a.m.

User Impersonation

2018-07-2703:15:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

50.3%

kafka-clients is vulnerable to user impersonation attacks. The vulnerabilities exists due to the lack of authentication checks in the SASL/PLAIN and SASL/SCRAM authentication methods using the built-in PLAIN or SCRAM server implementation in kafka-clients.

0.001 Low

EPSS

Percentile

50.3%