SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-22160

This allows an attacker to connect to Pulsar instances as any user (incl. admins).

CRITICAL 9.8EPSS 52.9%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 52.9%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the token is not validated if the algorithm of the presented token is set to "none". This allows an attacker to connect to Pulsar instances as any user (incl. admins).

CVSS 3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
52.93% probability · 99th percentile
CISA KEV
Not listed
Weakness
CWE-347
Affected
apache/pulsar
Source
security@apache.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.