org.apache.kafka:connect vulnerabilities (TuxCare)

2 vulnerabilities.

• org.apache.kafka:connect TuxCare Apache Kafka: SCRAM authentication vulnerable to replay attacks when used without encryption CVE-2024-56128 Fix available 5.3 MediumDecember 18, 2024
• org.apache.kafka:connect TuxCare Apache Kafka Connect API: Possible RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration using Kafka Connect CVE-2023-25194 Public exploitFix available EPSS 95.8% 8.8 HighFebruary 7, 2023