← volver
CVE-2026-45080

Klaw: Improper Access Control Allows Disclosure of Password Hash

CVSS 6.9 MEDIUMEPSS 0.2%CWE-200CWE-284
Klaw is a self-service Apache Kafka Topic Management/Governance tool/portal. Prior to version 2.10.4, improper access control allows disclosure of password hash. This issue has been patched in version 2.10.4.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Productos afectados
Aiven-Open · klaw

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →