PT-2023-22685 · Apache · Apache Pulsar Broker

Michael Marshall · Publicado 2023-07-12 · Atualizado 2023-07-20 · CVE-2023-30428

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Apache Pulsar Broker versions 2.9.0 through 2.9.5 Apache Pulsar Broker versions 2.10.0 through 2.10.3 Apache Pulsar Broker version 2.11.0

Description The issue is related to an Incorrect Authorization vulnerability in Apache Pulsar Broker's Rest Producer, allowing an authenticated user with a custom HTTP header to produce a message to any topic using the broker's admin role. This can be exploited when an attacker connects directly to the Pulsar Broker. The vulnerability poses two known risks: producing garbage messages to any topic in the cluster and influencing topic settings for other tenants, potentially leading to exfiltration and/or deletion of messages.

Recommendations Apache Pulsar Broker versions 2.9.0 through 2.9.5 should upgrade to one of the patched versions. Apache Pulsar Broker versions 2.10.0 through 2.10.3 should upgrade to at least version 2.10.4. Apache Pulsar Broker version 2.11.0 should upgrade to at least version 2.11.1.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2023-30428

GHSA-J2R7-3RVW-G7GX

Produtos afetados

Apache Pulsar Broker

Referências · 6

• https://github.com/apache/pulsar · Nota
• https://t.me/cibsecurity/66534 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30428 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-j2r7-3rvw-g7gx · Aviso do Fabricante
• https://lists.apache.org/thread/v39hqtgrmyxr85rmofwvgrktnflbq3q5 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-30428 · Aviso do Fabricante