CVE-2018-1288

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker…

published July 26, 2018

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04801 · 91.9th percentile
Published
2018-07-26T14:00Z
EPSS history
Timeline
  • 26 JUL 14:00Z
    In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker…
    cvelistv5