← Back

CVE-2018-1288

nvd nist
Published: Jul 26, 2018Modified: Nov 21, 2024

JSON object

Loading...
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Exploitability: 2.8 / Impact: 2.5
Source: NVD

Description

In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.

Affected (12)

Apache
1 product
Kafka
Redhat
1 product
Jboss Middleware Text Only Advisories
Oracle
3 products
Database
Primavera P6 Enterprise Project Portfolio Management
Timesten In Memory Database
Configuration A
4 vulnerable
Vulnerable SoftwareAffected Versions
Apache
Kafka
After 0.9.0.0 to 0.9.0.1
Kafka
From 0.10.0.0 to 0.10.2.1
Kafka
From 0.11.0.0 to 0.11.0.2
Kafka
Version 1.0.0
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Jboss Middleware Text Only Advisories
Version 1.0
Configuration C
7 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Database
Version 11.2.0.4
Database
Version 12.1.0.2
Database
Version 12.2.0.1
Database
Version 18c
Database
Version 19c
Primavera P6 Enterprise Project Portfolio Management
From 19.12.0.0 to 19.12.6.0
Timesten In Memory Database
Before 18.1.2.1.0

References (20)

Source: security@apache.org
Broken Link
Source: security@apache.org
Third Party Advisory
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
Source: security@apache.org
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.