Advisories · Technology
strimzi-kafka-operator.
Every CVE that names strimzi-kafka-operator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Strimzi: All CAs from a custom CA chain consisting of multiple CAs are trusted for mTLS user autentication
- strimzi-kafka-operator
- Authentication bypass
- Weak cryptography or TLS
- CVSS 5.9 Medium
Strimzi All CAs from CA chain will be trusted in Kafka Connect and Kafka MirrorMaker 2 target clusters
- strimzi-kafka-operator
- Weak cryptography or TLS
- CWE-296