| パッケージ | 影響を受けるバージョン | 修正済みバージョン |
|---|---|---|
| org.apache.kafka:kafka | ≥ 2.0.0, < 2.0.2≥ 2.1.0, < 2.1.2≥ 2.2.0, < 2.2.2≥ 2.3.0, < 2.3.1 | 2.0.22.1.22.2.22.3.1 |
| kafka | = 2.0.0= 2.0.1= 2.1.0= 2.1.1= 2.2.0= 2.2.1= 2.3.0 | |
| banking corporate lending process management | = 14.1.0= 14.3.0= 14.4.0 | |
| banking credit facilities process management | = 14.1.0= 14.3.0= 14.4.0 | |
| banking liquidity management | ≥ 14.0.0, ≤ 14.4.0 | |
| banking payments | = 14.4.0 | |
| banking platform | = 2.7.0 | |
| banking supply chain finance | ≥ 14.2.0, ≤ 14.4.0 | |
| banking trade finance process management | = 14.1.0= 14.3.0= 14.4.0 | |
| banking virtual account management | = 14.1.0= 14.3.0= 14.4.0 | |
| blockchain platform | < 21.1.2 | 21.1.2 |
| communications cloud native core policy | = 1.9.0 | |
| financial services analytical applications infrastructure | ≥ 8.0.6, ≤ 8.1.0 | |
| flexcube universal banking | = 14.4.0 |
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration property value, then any client can issue a request to the same Connect cluster to obtain the connector's task configuration and the response will contain the plaintext secret rather than the externalized secrets variables.
これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。
無料でサイトをスキャン