WID-SEC-W-2023-2170

DeutschShown in its original language — a full translation is planned for a future version.

VMware Tanzu Spring Framework for Apache Kafka: Schwachstelle ermöglicht nicht spezifizierten Angriff

view advisory published 2023-08-24

Ein lokaler Angreifer kann eine Schwachstelle in VMware Tanzu Spring Framework for Apache Kafka ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-34040US	high7.8	2.09% (82nd)	Exploit	2023-08-24
In Spring for Apache Kafka 3.0.9 and earlier and versions 2.9.10 and earlier, a possible deserialization attack vector existed, but only if unusual configuration was applied. An at…

references

External citations — patches, advisories, analysis.

Spring Security Advisory CVE-2023-34040 vom 2023-08-24external
WID-SEC-W-2023-2170 - CSAF Versionself
WID-SEC-2023-2170 - Portal Versionself
IBM Security Bulletin 7099297 vom 2023-12-18external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan