Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-25171 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-10T21:11:05.640Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: kiwitcms Products: kiwi Problem Types: CWE-770 Description: Kiwi TCMS, an open source test management system, does not impose rate limits in versions prior to 12.0. This makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may strain SMTP resources. Users should upgrade to v12.0 or later to receive a patch. As potential workarounds, use
that may strain SMTP resources. Users should upgrade to v12.0 or later to receive a patch. As potential workarounds, users may install and configure a rate-limiting proxy in front of Kiwi TCMS and/or configure rate limits on their email server when possible. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kiwitcms.org/blog/kiwi-tcms-team/2023/02/15/kiwi-tcms-120/ - https://huntr.dev/bounties/3b712cb6-3fa3-4f71-8562-7a7016c6262e - https://github.com/kiwitcms/Kiwi/security/advisories/GHSA-7j9h-3jxf-3vrf - https://github.com/kiwitcms/Kiwi/commit/761305d04f5910ba14cc04d1255a8f1afdbb87f3
CVE ID: CVE-2023-25172 State: PUBLISHED Published: 2023-03-17T16:07:27.668Z Last Updated: 2025-02-25T14:54:25.650Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: discourse Products: discourse Problem Types: CWE-79 Description: Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches, a maliciously crafted URL can be included in a user's full name field to to carry out cross-site scripting attacks on sites with a disabled or overly permissive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. The vulnerability is patched in
sive CSP (Content Security Policy). Discourse's default CSP prevents this vulnerability. The vulnerability is patched in version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branches. As a workaround, enable and/or restore your site's CSP to the default one provided with Discourse. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse/security/advisories/GHSA-7pm2-prxw-wrvp - https://github.com/discourse/discourse/pull/20008 - https://github.com/discourse/discourse/pull/20009 - https://github.com/discourse/discourse/commit/1a5a6f66cb821ed29a737311d6fdc2eba5adc915 - https://gith
ourse/pull/20009 - https://github.com/discourse/discourse/commit/1a5a6f66cb821ed29a737311d6fdc2eba5adc915 - https://github.com/discourse/discourse/commit/c186a46910431020e8efc425dec2133e7a99fa9a
CVE ID: CVE-2023-25173 State: PUBLISHED Published: 2023-02-16T14:09:12.073Z Last Updated: 2025-03-10T21:10:38.648Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: containerd Products: containerd Problem Types: CWE-863 Description: containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up properly inside a container. If an attacker has direct access to a container and manipulates their supplementary group access, they may be able to use supplementary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive informati
ntary group access to bypass primary group restrictions in some cases, potentially gaining access to sensitive information or gaining the ability to execute code in that container. Downstream applications that use the containerd client library may be affected as well. This bug has been fixed in containerd v1.6.18 and v.1.5.18. Users should update to these versions and recreate containers to resolve this issue. Users who rely on a downstream application that uses containerd's client library should check that application for a separate advisory and instructions. As a workaround, ensure that the `"USER $USERNAME"` Dockerfile instruction is not used. Instead, set the container entrypoint to a va
nd, ensure that the `"USER $USERNAME"` Dockerfile instruction is not used. Instead, set the container entrypoint to a value similar to `ENTRYPOINT ["su", "-", "user"]` to allow `su` to properly set up supplementary groups. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p - https://github.com/moby/moby/security/advisories/GHSA-rc4r-wh2q-q6c4 - https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a - https://github.com/advisories/GHSA-4wjj-jwc9-2x96 - https://github.com/advisories/GHSA-fjm8-m7m6-2fjp - https://github.com/advisories/GHSA-phj
isories/GHSA-4wjj-jwc9-2x96 - https://github.com/advisories/GHSA-fjm8-m7m6-2fjp - https://github.com/advisories/GHSA-phjr-8j92-w5v7 - https://github.com/containerd/containerd/releases/tag/v1.5.18 - https://github.com/containerd/containerd/releases/tag/v1.6.18 - https://www.benthamsgaze.org/2022/08/22/vulnerability-in-linux-containers-investigation-and-mitigation/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTE4ITXXPIWZEQ4HYQCB6N6GZIMWXDAI/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.f
t.org/message/LYZOKMMVX4SIEHPJW3SJUQGMO5YZCPHC/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XNF4OLYZRQE75EB5TW5N42FSXHBXGWFE/
CVE ID: CVE-2023-25174 State: PUBLISHED Published: 2024-02-14T13:37:53.709Z Last Updated: 2025-05-12T15:01:20.154Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Chipset Driver Software Problem Types: escalation of privilege, CWE-284 Description: Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00928.html
CVE ID: CVE-2023-25175 State: PUBLISHED Published: 2023-05-10T13:17:06.661Z Last Updated: 2025-01-27T18:02:32.282Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:L) Vendors: n/a Products: Intel(R) Server Board BMC firmware Problem Types: information disclosure, CWE-20 Description: Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information disclosure via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00839.html
CVE ID: CVE-2023-25176 State: PUBLISHED Published: 2024-03-04T06:18:53.563Z Last Updated: 2024-08-02T11:18:35.917Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2024/2024-03.md
CVE ID: CVE-2023-25177 State: PUBLISHED Published: 2023-06-07T20:51:51.041Z Last Updated: 2025-01-06T20:59:57.153Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Delta Electronics Products: CNCSoft-B DOPSoft Problem Types: CWE-121 Description: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior are vulnerable to stack-based buffer overflow, which could allow an attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-157-01
CVE ID: CVE-2023-25178 State: PUBLISHED Published: 2023-07-13T10:59:16.333Z Last Updated: 2025-03-05T18:50:28.752Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Honeywell Products: C300 Problem Types: CWE-345 Description: Controller may be loaded with malicious firmware which could enable remote code execution. See Honeywell Security Notification for recommendations on upgrading and versioning. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://process.honeywell.com
CVE ID: CVE-2023-25179 State: PUBLISHED Published: 2023-05-10T13:17:24.420Z Last Updated: 2025-01-24T17:47:35.219Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Unite(R) android application Problem Types: denial of service, CWE-400 Description: Uncontrolled resource consumption in the Intel(R) Unite(R) android application before Release 17 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00825.html
CVE ID: CVE-2023-25180 State: REJECTED Published: N/A Last Updated: 2023-07-20T20:27:05.089Z Description: No description available.
CVE ID: CVE-2023-25181 State: PUBLISHED Published: 2023-11-14T09:14:53.482Z Last Updated: 2024-08-02T11:18:36.118Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Silicon Labs, Weston Embedded Products: Gecko Platform, Cesium NET, uC-HTTP Problem Types: CWE-122 Description: A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted set of network packets can lead to arbitrary code execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2023-1726
CVE ID: CVE-2023-25182 State: PUBLISHED Published: 2023-08-11T02:37:04.888Z Last Updated: 2024-10-02T14:19:38.376Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: n/a Products: Intel(R) Unite(R) Client software for Mac Problem Types: escalation of privilege, CWE-427 Description: Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html
CVE ID: CVE-2023-25183 State: PUBLISHED Published: 2023-05-22T20:04:36.888Z Last Updated: 2025-01-16T21:33:13.131Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Snap One Products: OvrC Cloud Problem Types: CWE-912 Description: In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-136-01 - https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-relea
es/icsa-23-136-01 - https://www.control4.com/docs/product/ovrc-software/release-notes/english/latest/ovrc-software-release-notes-rev-r.pdf
CVE ID: CVE-2023-25184 State: PUBLISHED Published: 2023-05-10T00:00:00.000Z Last Updated: 2025-01-28T14:38:27.351Z Vendors: Seiko Solutions Inc. Products: SkyBridge MB-A200, SkyBridge BASIC MB-A130, and SkySpider MB-R210 Problem Types: Use of weak credentials Description: Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASIC MB-A130 firmware Ver. 1.4.1 and earlier, and SkySpider MB-R210 firmware Ver. 1.01.00 and earlier. Additional Analyst Notes: - CV
firmware Ver. 1.4.1 and earlier, and SkySpider MB-R210 firmware Ver. 1.01.00 and earlier. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.seiko-sol.co.jp/archives/73969/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a100/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a200/ - https://www.seiko-sol.co.jp/products/skybridge/skybridge_download/mb-a130/ - https://www.seiko-sol.co.jp/products/skyspider/skyspider_download/mb-r210/ - https://jvn.jp/en/jp/JVN40604023/
CVE ID: CVE-2023-25185 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-12T21:41:24.864Z Severity: LOW (CVSS 3.8 CVSS:3.1/AC:H/AV:L/A:L/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software releases. Certain software processes in the BTS internal software design have unnecessarily high privileges to BTS embedded operating system (OS) resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://Nokia.com - https://www.nokia.com/about-us/secu
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://Nokia.com - https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25185/
CVE ID: CVE-2023-25186 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-11T20:22:52.063Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AC:H/AV:L/A:H/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from a Nokia Single RAN BTS baseband unit, a directory path traversal in the Nokia BTS baseband unit diagnostic tool AaShell (which is by default disabled) provides access to the BTS baseband unit internal filesystem from the mobile network solution internal BTS management network. Additional Analyst Notes: - CVE
it internal filesystem from the mobile network solution internal BTS management network. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://Nokia.com - https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25186/
CVE ID: CVE-2023-25187 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-12T20:38:02.588Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AC:H/AV:L/A:H/C:H/I:H/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time installed) default SSH public/private key values that are specific to a network operator. As a result, the CSP internal BTS network SSH server (disabled by default) continues to apply the default SSH public/private key values. These keys don't give access to BTS, because service user authentication is userna
efault SSH public/private key values. These keys don't give access to BTS, because service user authentication is username/password-based on top of SSH. Nokia factory installed default SSH keys are meant to be changed from operator-specific values during the BTS deployment commissioning phase. However, before the 21B release, BTS commissioning manuals did not provide instructions to change default SSH keys (to BTS operator-specific values). This leads to a possibility for malicious operations staff (inside a CSP network) to attempt MITM exploitation of BTS service user access, during the moments that SSH is enabled for Nokia service personnel to perform troubleshooting activities. Additional
ss, during the moments that SSH is enabled for Nokia service personnel to perform troubleshooting activities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://Nokia.com - https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25187/ - http://packetstormsecurity.com/files/173055/Nokia-ASIKA-7.13.52-Private-Key-Disclosure.html
CVE ID: CVE-2023-25188 State: PUBLISHED Published: 2023-06-16T00:00:00 Last Updated: 2024-12-12T18:50:04.914Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AC:H/AV:L/A:H/C:L/I:L/PR:H/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. If/when CSP (as a BTS administrator) removes security hardenings from the Nokia Single RAN BTS baseband unit, the BTS baseband unit diagnostic tool AaShell (which is by default disabled) allows unauthenticated access from the mobile network solution internal BTS management network to the BTS embedded Linux operating-system level. Additional Analyst Notes: - CVE Program Contain
BTS management network to the BTS embedded Linux operating-system level. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://Nokia.com - https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25188/
CVE ID: CVE-2023-25189 State: PUBLISHED Published: 2024-09-25T00:00:00 Last Updated: 2024-10-29T18:25:18.827Z Severity: LOW (CVSS 3.3 CVSS:3.1/AC:H/AV:L/A:N/C:L/I:L/PR:L/S:U/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: BTS is affected by information disclosure vulnerability where mobile network operator personnel connected over BTS Web Element Manager, regardless of the access privileges, having a possibility to read BTS service operation details performed by Nokia Care service personnel via SSH. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nokia.com/about-us/security-and-privacy/product-security-advisory/cve-2023-25189/
CVE ID: CVE-2023-25191 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T15:39:07.444Z Vendors: n/a Products: n/a Problem Types: n/a Description: AMI MegaRAC SPX devices allow Password Disclosure through Redfish. The fixed versions are SPx_12-update-7.00 and SPx_13-update-5.00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf
CVE ID: CVE-2023-25192 State: PUBLISHED Published: 2023-02-15T00:00:00.000Z Last Updated: 2025-03-19T15:38:11.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: AMI MegaRAC SPX devices allow User Enumeration through Redfish. The fixed versions are SPx12-update-7.00 and SPx13-update-5.00. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://9443417.fs1.hubspotusercontent-na1.net/hubfs/9443417/Security%20Advisories/AMI-SA-2023002.pdf
CVE ID: CVE-2023-25193 State: PUBLISHED Published: 2023-02-04T00:00:00.000Z Last Updated: 2025-03-25T20:23:16.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/harfbuzz/harfbuzz/commit/85be877925ddbf34f74a1229f3ca1716bb6170dc - https://chromium.googlesource.com/chromium/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361 - https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f
m/src/+/e1f324aa681af54101c1f2d173d92adb80e37088/DEPS#361 - https://github.com/harfbuzz/harfbuzz/blob/2822b589bc837fae6f66233e2cf2eef0f6ce8470/src/hb-ot-layout-gsubgpos.hh - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWCHWSICWVZSAXP2YAXM65JC2GR53547/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZ5M2GSAIHFPLHYJXUPQ2QDJCLWXUGO3/ - https://security.netapp.com/advisory/ntap-20230725-0006/
CVE ID: CVE-2023-25194 State: PUBLISHED Published: 2023-02-07T19:11:22.260Z Last Updated: 2025-03-25T14:12:50.930Z Vendors: Apache Software Foundation Products: Apache Kafka Connect API Problem Types: CWE-502 Description: A possible security vulnerability has been identified in Apache Kafka Connect API. This requires access to a Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, which has been possible on Kafka Connect clusters since Apache Kafka Connect 2.3.0. When configuring the connector via the Kafka Connect REST API, an authenticated operator can set the `sasl.jaas.config` property
iguring the connector via the Kafka Connect REST API, an authenticated operator can set the `sasl.jaas.config` property for any of the connector's Kafka clients to "com.sun.security.auth.module.JndiLoginModule", which can be done via the `producer.override.sasl.jaas.config`, `consumer.override.sasl.jaas.config`, or `admin.override.sasl.jaas.config` properties. This will allow the server to connect to the attacker's LDAP server and deserialize the LDAP response, which the attacker can use to execute java deserialization gadget chains on the Kafka connect server. Attacker can cause unrestricted deserialization of untrusted data (or) RCE vulnerability when there are gadgets in the classpath. Si
cause unrestricted deserialization of untrusted data (or) RCE vulnerability when there are gadgets in the classpath. Since Apache Kafka 3.0.0, users are allowed to specify these properties in connector configurations for Kafka Connect clusters running with out-of-the-box configurations. Before Apache Kafka 3.0.0, users may not specify these properties unless the Kafka Connect cluster has been reconfigured with a connector client override policy that permits them. Since Apache Kafka 3.4.0, we have added a system property ("-Dorg.apache.kafka.disallowed.login.modules") to disable the problematic login modules usage in SASL JAAS configuration. Also by default "com.sun.security.auth.module.Jndi
sable the problematic login modules usage in SASL JAAS configuration. Also by default "com.sun.security.auth.module.JndiLoginModule" is disabled in Apache Kafka Connect 3.4.0. We advise the Kafka Connect users to validate connector configurations and only allow trusted JNDI configurations. Also examine connector dependencies for vulnerable versions and either upgrade their connectors, upgrading that specific dependency, or removing the connectors as options for remediation. Finally, in addition to leveraging the "org.apache.kafka.disallowed.login.modules" system property, Kafka Connect users can also implement their own connector client config override policy, which can be used to control wh
afka Connect users can also implement their own connector client config override policy, which can be used to control which Kafka client properties can be overridden directly in a connector config and which cannot. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kafka.apache.org/cve-list - https://lists.apache.org/thread/vy1c7fqcdqvq5grcqp6q5jyyb302khyz - http://packetstormsecurity.com/files/173151/Apache-Druid-JNDI-Injection-Remote-Code-Execution.html