| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.kafka:kafka | ≥ 0.11.0.0, < 0.11.0.3≥ 0.9.0.0, < 0.10.2.2≥ 1.0.0, < 1.0.1 | 0.11.0.30.10.2.21.0.1 |
| kafka | = 1.0.0≥ 0.10.0.0, ≤ 0.10.2.1≥ 0.11.0.0, ≤ 0.11.0.2> 0.9.0.0, ≤ 0.9.0.1 | |
| database | = 11.2.0.4= 12.1.0.2= 12.2.0.1= 18c= 19c | |
| primavera p6 enterprise project portfolio management | ≥ 19.12.0.0, ≤ 19.12.6.0 | |
| timesten in-memory database | < 18.1.2.1.0 | 18.1.2.1.0 |
| jboss middleware text-only advisories | = 1.0 |
In Apache Kafka 0.9.0.0 to 0.9.0.1, 0.10.0.0 to 0.10.2.1, 0.11.0.0 to 0.11.0.2, and 1.0.0, authenticated Kafka users may perform action reserved for the Broker via a manually created fetch request interfering with data replication, resulting in data loss.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free