PT-2019-6216 · Apache · Apache Kafka

Published 2019-07-10 · Updated 2022-05-24 · CVE-2018-17196

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Kafka versions 0.11.0.0 through 2.1.0

Description The issue is related to insufficient access control in Apache Kafka when using Access Control Lists (ACLs). It allows an attacker to bypass security restrictions by crafting a special request. Only authenticated clients with Write permission on the respective topics can exploit this issue.

Recommendations For Apache Kafka versions 0.11.0.0 through 2.1.0, upgrade to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting Write permission on topics to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-264

CWE-20

Related Identifiers

BDU:2022-03778

CVE-2018-17196

GHSA-47W3-66WQ-CPXG

Affected Products

Apache Kafka

References · 28

• https://osv.dev/vulnerability/CVE-2018-17196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-17196 · Security Note
• https://osv.dev/vulnerability/GHSA-47w3-66wq-cpxg · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03778 · Security Note
• https://lists.apache.org/thread.html/d1581fb6464c9bec8a72575c01f5097d68e2fbb230aff24622622a58%40%3Ccommits.kafka.apache.org%3E · Note
• https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E · Note
• https://ibm.com/blogs/psirt/security-bulletin-apache-kafka-as-used-by-ibm-qradar-siem-is-vulnerable-to-information-disclosure-cve-2021-38153-cve-2018-17196 · Note
• http://securityfocus.com/bid/109139%20Third%20Party%20Advisory · Note
• https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E · Note
• https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1732309 · Note
• https://t.me/cvenotify/17045 · Telegram Post
• https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E · Note
• https://oracle.com/security-alerts/cpujul2020.html · Note
• https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E · Note