[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPgyGVHNCjHIBzKS3VYXAYlO-MqkuDj7AM62YqB4C_WE":3,"g5a-risk:CVE-2018-17196":135},{"success":4,"data":5,"meta":133},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":89,"weaknesses":90,"weaknessesCount":49,"isActivelyExploited":94,"cisaInfo":15,"otxData":15,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":131,"notableEvents":132},"CVE-2018-17196","What is CVE-2018-17196?","In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction\u002Fidempotent ACL validation. Only authenticated clients with Write permission on the respective topics are able to exploit this vulnerability. Users should upgrade to 2.1.1 or later where this vulnerability has been fixed.","In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is possible to manually craft a Produce request which bypasses transaction\u002Fidempotent ACL validation....","2019-07-11T21:15:09.53","2023-11-07T02:54:12.113",8.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",2.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.05479,[40,40,40,40,40,40,40],"High",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"apache","kafka","*","cpe:2.3:a:apache:kafka:*:*:*:*:*:*:*:*",1,[51,56,60,63,66,69,72,75,78,82,86],{"url":52,"source":53,"tags":54},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F109139","Securityfocus",[55],"Third Party Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002F519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","Apache",[],{"url":61,"source":58,"tags":62},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fb0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E",[],{"url":64,"source":58,"tags":65},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fd1581fb6464c9bec8a72575c01f5097d68e2fbb230aff24622622a58%40%3Ccommits.kafka.apache.org%3E",[],{"url":67,"source":58,"tags":68},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Ff9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E",[],{"url":70,"source":58,"tags":71},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr66de86b9a608c1da70b2d27d765c11ec88edf6e5dd6f379ab33e072a%40%3Cuser.flink.apache.org%3E",[],{"url":73,"source":58,"tags":74},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr8890b8f18f1de821595792b58b968a89692a255bc20d86d395270740%40%3Ccommits.druid.apache.org%3E",[],{"url":76,"source":58,"tags":77},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frc27d424d0bdeaf31081c3e246db3c66e882243ae3f342dfa845e0261%40%3Ccommits.kafka.apache.org%3E",[],{"url":79,"source":80,"tags":81},"https:\u002F\u002Fwww.mail-archive.com\u002Fdev%40kafka.apache.org\u002Fmsg99277.html","Mail-archive",[],{"url":83,"source":84,"tags":85},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujul2020.html","Oracle",[],{"url":87,"source":84,"tags":88},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpuoct2020.html",[],11,[91],{"id":92,"name":92,"description":93},"Unknown","NVD-CWE-noinfo",false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2018-17196? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-17196, a high severity cyber security vulnerability from 2019. In Apache Kafka versions between 0.11.0.0 and 2.1.0, it is ...","CVE-2018-17196, CVE-2018-17196 vulnerability, CVE-2018-17196 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, apache security, kafka vulnerability","\u002Fwhat-is\u002Fcve-2018-17196",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-17196","Cybersecurity","CVE-2018-17196, CVE-2018-17196 vulnerability, CVE-2018-17196 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":15,"Negate":15,"Nodes":123},[124],{"Operator":125,"Negate":15,"CPEMatch":126},"OR",[127],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":129,"VersionEndExcluding":15,"VersionEndIncluding":130},"F817CC29-1413-49E3-962B-FEC919727573","0.11.0.0","2.1.0",[],[],{"lastModified":11,"cacheTime":134,"version":32},1792243699307,{"score":136,"band":137,"action":138,"scoredAt":139},49,"Medium","Plan remediation","2026-10-16T06:46:29.69547+00:00"]