CVE-2017-12610
Fixed upstream EPSS 3%
In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.
Products: Apache Software Foundation Apache Kafka
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.kafka:kafka-clients | 0.10.2.2 |
| Maven | org.apache.kafka:kafka-clients | 0.11.0.2 |