{ "document" : { "aggregate_severity" : { "text" : "hoch" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "Apache Kafka ist eine verteilte Streaming-Plattform mit einer Publish-Subcribe-Architektur (Pub-Sub).", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Kafka ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.", "title" : "Angriff" }, { "category" : "general", "text" : "- Linux\n- UNIX\n- Windows", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2023-0300 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0300.json" }, { "category" : "self", "summary" : "WID-SEC-2023-0300 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0300" }, { "category" : "external", "summary" : "Apache Security Advisory vom 2023-02-07", "url" : "https://lists.apache.org/thread/vy1c7fqcdqvq5grcqp6q5jyyb302khyz" }, { "category" : "external", "summary" : "PoC auf hackerone.com", "url" : "https://hackerone.com/reports/1529790" }, { "category" : "external", "summary" : "IBM Security Bulletin 6963562 vom 2023-03-29", "url" : "https://www.ibm.com/support/pages/node/6963562" }, { "category" : "external", "summary" : "IBM Security Bulletin 6967573 vom 2023-03-31", "url" : "https://www.ibm.com/support/pages/node/6967573" }, { "category" : "external", "summary" : "IBM Security Bulletin 7001787 vom 2023-06-07", "url" : "https://www.ibm.com/support/pages/node/7001787" }, { "category" : "external", "summary" : "IBM Security Bulletin 7010099 vom 2023-07-06", "url" : "https://www.ibm.com/support/pages/node/7010099" }, { "category" : "external", "summary" : "IBM Security Bulletin 7114054 vom 2024-02-01", "url" : "https://www.ibm.com/support/pages/node/7114054" }, { "category" : "external", "summary" : "IBM Security Bulletin 7242900 vom 2025-08-22", "url" : "https://www.ibm.com/support/pages/node/7242900" }, { "category" : "external", "summary" : "IBM Security Bulletin 7256423 vom 2026-01-07", "url" : "https://www.ibm.com/support/pages/node/7256423" } ], "source_lang" : "en-US", "title" : "Apache Kafka: Schwachstelle ermöglicht Codeausführung", "tracking" : { "current_release_date" : "2026-01-06T23:00:00.000+00:00", "generator" : { "date" : "2026-01-07T09:25:19.884+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.5.0" } }, "id" : "WID-SEC-W-2023-0300", "initial_release_date" : "2023-02-07T23:00:00.000+00:00", "revision_history" : [ { "date" : "2023-02-07T23:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" }, { "date" : "2023-03-28T22:00:00.000+00:00", "number" : "2", "summary" : "Neue Updates von IBM aufgenommen" }, { "date" : "2023-04-02T22:00:00.000+00:00", "number" : "3", "summary" : "Neue Updates von IBM aufgenommen" }, { "date" : "2023-06-06T22:00:00.000+00:00", "number" : "4", "summary" : "Neue Updates von IBM aufgenommen" }, { "date" : "2023-07-06T22:00:00.000+00:00", "number" : "5", "summary" : "Neue Updates von IBM aufgenommen" }, { "date" : "2024-02-01T23:00:00.000+00:00", "number" : "6", "summary" : "Neue Updates von IBM aufgenommen" }, { "date" : "2025-08-24T22:00:00.000+00:00", "number" : "7", "summary" : "Neue Updates von IBM und IBM-APAR aufgenommen" }, { "date" : "2026-01-06T23:00:00.000+00:00", "number" : "8", "summary" : "Neue Updates von IBM aufgenommen" } ], "status" : "final", "version" : "8" } }, "product_tree" : { "branches" : [ { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "<3.4.0", "product" : { "name" : "Apache Kafka <3.4.0", "product_id" : "T026177" } }, { "category" : "product_version", "name" : "3.4.0", "product" : { "name" : "Apache Kafka 3.4.0", "product_id" : "T026177-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:apache:kafka:3.4.0" } } } ], "category" : "product_name", "name" : "Kafka" } ], "category" : "vendor", "name" : "Apache" }, { "branches" : [ { "branches" : [ { "category" : "product_version", "name" : "13.0.1.0-13.0.4.0", "product" : { "name" : "IBM App Connect Enterprise 13.0.1.0-13.0.4.0", "product_id" : "T046467", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:app_connect_enterprise:13.0.1.0_-_13.0.4.0" } } }, { "category" : "product_version", "name" : "12.0.1.0-12.0.12.15", "product" : { "name" : "IBM App Connect Enterprise 12.0.1.0-12.0.12.15", "product_id" : "T046468", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:app_connect_enterprise:12.0.1.0_-_12.0.12.15" } } } ], "category" : "product_name", "name" : "App Connect Enterprise" }, { "category" : "product_name", "name" : "IBM Business Automation Workflow", "product" : { "name" : "IBM Business Automation Workflow", "product_id" : "T019704", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:business_automation_workflow:-" } } }, { "category" : "product_name", "name" : "IBM InfoSphere Data Replication", "product" : { "name" : "IBM InfoSphere Data Replication", "product_id" : "T021399", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:infosphere_data_replication:-" } } }, { "branches" : [ { "category" : "product_version", "name" : "for z/OS 10.1.0.0-10.1.0.5", "product" : { "name" : "IBM Integration Bus for z/OS 10.1.0.0-10.1.0.5", "product_id" : "T046469", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:integration_bus:10.1.0.0_-_10.1.0.5::for_zos" } } } ], "category" : "product_name", "name" : "Integration Bus" }, { "branches" : [ { "category" : "product_version", "name" : "7.6.1.3", "product" : { "name" : "IBM Maximo Asset Management 7.6.1.3", "product_id" : "1234217", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:maximo_asset_management:7.6.1.3" } } } ], "category" : "product_name", "name" : "Maximo Asset Management" }, { "branches" : [ { "category" : "product_version", "name" : "8.10.x", "product" : { "name" : "IBM Operational Decision Manager 8.10.x", "product_id" : "T027827", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:operational_decision_manager:8.10.x" } } }, { "category" : "product_version", "name" : "8.11.x", "product" : { "name" : "IBM Operational Decision Manager 8.11.x", "product_id" : "T027828", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:operational_decision_manager:8.11.x" } } } ], "category" : "product_name", "name" : "Operational Decision Manager" }, { "branches" : [ { "category" : "product_version", "name" : "7.5", "product" : { "name" : "IBM QRadar SIEM 7.5", "product_id" : "T022954", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:qradar_siem:7.5" } } } ], "category" : "product_name", "name" : "QRadar SIEM" }, { "category" : "product_name", "name" : "IBM Tivoli Netcool/OMNIbus", "product" : { "name" : "IBM Tivoli Netcool/OMNIbus", "product_id" : "T004181", "product_identification_helper" : { "cpe" : "cpe:/a:ibm:tivoli_netcool%2fomnibus:-" } } } ], "category" : "vendor", "name" : "IBM" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2023-25194", "product_status" : { "known_affected" : [ "T022954", "T027827", "T046468", "T021399", "T027828", "T046469", "T019704", "T004181", "1234217", "T026177", "T046467" ] }, "release_date" : "2023-02-07T23:00:00.000+00:00", "title" : "CVE-2023-25194" } ] }