By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

How to handle Kafka CVE-2023-25194 when MSK does not support the patched version

0

Apache recently released a report on CVE-2023-25194 - POSSIBLE RCE/DENIAL OF SERVICE ATTACK VIA SASL JAAS JNDILOGINMODULE CONFIGURATION USING KAFKA CONNECT

We are using MSK for Kafka. The fixed version for this vulnerability (3.4.0) is not yet available in MSK. I'm hoping someone can help me understand what we can do about this vulnerability.

Topics
AnalyticsAWS Well-Architected Framework
Tags
Amazon Managed Streaming for Apache Kafka (Amazon MSK)Security
Language
English
rePost-User-3514592
asked a year ago250 views
1 Answer
1

As state in CVE-2023-25194 this is an issue with Apache Kafka Connect. Do you use the MKS Connect?

profile pictureAWS
Ibrahim Cesar
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content