CVE-2017-12610

MEDIUM · CVSS 6.8 EPSS 2.99%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-07-26 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-12610

Severity

MEDIUM

CVSS

6.8

EPSS

2.99%

Apache

Original Filing — NVD Description

In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.1, authenticated Kafka clients may use impersonation via a manually crafted protocol message with SASL/PLAIN or SASL/SCRAM authentication when using the built-in PLAIN or SCRAM server implementations in Apache Kafka.