CVE-2017-12610: Improper Authentication

July 26, 2018 (updated October 17, 2019)

Authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.

References

www.securityfocus.com/bid/104899
nvd.nist.gov/vuln/detail/CVE-2017-12610

Code Behaviors & Features

Detect and mitigate CVE-2017-12610 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →