CVE-2025-30677
Summary
by MITRE • 04/09/2025
Apache Pulsar contains multiple connectors for integrating with Apache Kafka. The Pulsar IO Apache Kafka Source Connector, Sink Connector, and Kafka Connect Adaptor Sink Connector log sensitive configuration properties in plain text in application logs.
This vulnerability can lead to unintended exposure of credentials in log files, potentially allowing attackers with access to these logs to obtain Apache Kafka credentials. The vulnerability's impact is limited by the fact that an attacker would need access to the application logs to exploit this issue.
This issue affects Apache Pulsar IO's Apache Kafka connectors in all versions before 3.0.11, 3.3.6, and 4.0.4.
3.0.x version users should upgrade to at least 3.0.11.
3.3.x version users should upgrade to at least 3.3.6.
4.0.x version users should upgrade to at least 4.0.4.
Users operating versions prior to those listed above should upgrade to the aforementioned patched versions or newer versions.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 07/16/2025
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx-xxxx-xxxxx Xxxxxxx Xxxxxx Xxxxxx'x Xxxxxxxxxxx Xxxxxxxxxxxx Xxxx Xxxxxx Xxxxx Xxxxxxx Xxx Xx Xxxxxxxxxx. Xxxx Xxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxx Xxxxxxxx Xxxxxxxxxx: Xxx Xxxxxx Xx Xxxxxx Xxxxx Xxxxxx Xxxxxxxxx, Xxxx Xxxxxxxxx, Xxx Xxxxx Xxxxxxx Xxxxxxx Xxxx Xxxxxxxxx. Xxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xx Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxx Xxxxxx Xxxxx Xxxxxxx, Xxxxxxxx Xxxxxxxxxxxxx Xx Xxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxxxx. Xxx Xxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxxxx Xx Xxxxx Xxxxxxxxxx Xxxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxx Xx Xxxxxxxxxxx Xxxx Xx Xxxxxxxxx Xxxxxx Xxxxxx Xxxx Xxxxx Xxxxxxxx Xxxxxxxxx Xx Xxxxxx. Xxxx Xxxxxxxxxx X Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxxxxxxxx Xx Xxx Xxxxxx Xx Xxxxxxxxx.
Xxx Xxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxx Xxxxxxxx Xxxxxxxx Xx Xxxxxxxxx Xxxx Xxxxxx Xxx Xxxxxxx Xxxxxxxxx Xx Xxx Xxxxx Xxxxxxxxxx. Xxxx Xxxxx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxxx Xx Xxxxxxxxxxxxxx Xxxxxxxxxxx, Xxxxxxxxxx Xxxxxxx, Xx Xxxxx Xxxxxxxxxx Xxxxxxxxxxx, Xxx Xxxxxx Xxxxx Xx Xxxxxxxxx Xxxxxx Xxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxxx Xxxxxxxx Xx Xxx Xxxxx. Xxxx Xxxxxxx X Xxxxxxxxxx Xxxxxxxx Xxxx Xxxxx Xxx Xxxxxx Xxxx Xxxxxx Xx Xxx Xxxxxxxxxxx Xxxx Xxx Xxxxxxxx Xxxxxxx Xxxxxxxxxxxxxx Xxxxxxxxxxx Xxx Xxxxx Xxxxxxxxx Xxxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxx Xxxx Xxx-xxx, Xxxxx Xxxxxxxxxxxx Xxxxxxxxx "xxxxxxxxxxx Xxxxxxxx Xxxxxxx Xxx Xxxx," Xxx Xxxxxxxxxx X Xxxxxxx Xxxx Xx Xxxxxxxx Xxxxxxx Xxxxxxxxx Xxxx Xxxxxxx Xxxxxxxxxxx Xxxxxxxx Xxxxxxxxxx. Xxxx Xx Xxxxxxxxxxx Xxxxxxxxxxx, Xxxx Xxxx Xxxxxxx Xx Xxxxxx Xxxxxxx Xxxx Xxxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxxxxxx, Xx Xxx Xxxxxxxx Xxxx Xxxxx Xxxx Xxxxxx Xx Xxx Xxxxxxxxxxx Xxx Xxxxx Xxxxxx Xxxx Xxxxxxxxxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxxxxx Xxxxxx.
Xxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxx, Xx Xx Xxx Xxxxxx Xxxxxxxxx Xx Xxxx Xxxxxxxxxxxx Xxxxxx Xx Xxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxxx Xxx Xxx&xx Xxxxxxxxx'x Xxxxxxxxx Xxxxx, Xxxxx Xxxxxxxx Xxxxxxx Xxxxxx Xx Xxxxxxxxxxx Xxxxxxx Xxxxxxx Xxxxx Xxxxxxxxx Xxx Xxxx Xxxxxxxxxx. Xxxxxxxxxxxxx Xxxxx Xxxxxxxx Xxxxxxxx Xx Xxxxxx Xxxxxx Xxxx Xxxxxxxxxxx Xxxx Xxxxxxx Xxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xxxxx Xxxxxxxxxxxxxx, Xxxxxxxxxx Xxx Xxxxxxxxx Xxxxxxxx Xxxxxxx. Xxx Xxxxxxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxx Xxxxx Xxx Xxxxxxxxxxx Xxx Xxxxxxx Xxxxxxx Xx Xxxxxxxxx Xxxxxx Xxx Xxxx, Xxxxxx Xxxx Xx Xxxxxxxxxx Xxxxxx Xxx Xxxx Xxxxxxxxx Xxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxxx Xxxxx. Xxx Xxxxxxxxxxxxx'x Xxxxxx Xx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxxx Xxxxx Xxx Xxxxx Xxx Xxx Xxxxxxxx Xxxxxxx Xx Xxxxx Xxxxxxxx Xxxxx Xxxx Xxxxxx Xx Xxx Xxxxxxx Xxxxxxxxxxxxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxxx Xxxxxxxxxxxxx Xxxxxx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxx. Xxxxx Xxxxxxxxx Xxxxxx Xxxxxx Xxxxxxxx X.x.x Xxxxxx Xxxxxxx Xx Xx Xxxxx X.x.xx, Xxxxx Xx X.x.x Xxxxxx Xxxx Xx X.x.x, Xxx X.x.x Xxxxx Xxxxxx Xxxxxxx Xx X.x.x Xx Xxxxx Xxxxxxxx. Xxxx Xxxxxxx Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxx Xxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxx Xxxxxx Xxxxxxxxxx Xxxxxxxxxxxx Xxxxxx Xxx Xxxxxxx Xxxxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxxxxx Xxx Xxxxxx Xxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxx Xxxxxxxxxxxx Xxxxxx Xxxxxxxx Xx Xxx Xxxxx. Xxxxxxxxxx Xxxxxxxxxxx Xxxxxxx Xxxxxxx Xxx Xxxx Xxxxxx, Xxxxxxxxxxxx Xxxxxx Xxx Xxxxxxxx Xxxxxxxx, Xxx Xxxxxxxx Xxxx Xxxxxxxxx Xxxxxxxxxxx Xx Xxx Xxxxxx Xx Xxxxxxxxx Xxxxxx Xxx Xxxxxxxxxxx Xxxxxx. Xxxxxxxx Xxxxx Xxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxxxxxxx Xxxxxxxxxxx Xx Xxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxx Xxxxxxxxxxx Xxx Xxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxx Xxxx Xxxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxxxxx Xxx Xxxxxxxxxxxx Xxx Xxxxxxxx Xxxx Xxx Xxxxxx Xxxx Xxxxxxxxxxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxxxx Xxxx Xxxxxx Xxxxxxxxx Xxxxxxxxxxx.