CVE-2026-76403 in Connect for Kafka
摘要
由 VulDB • 2026-08-20
在Splunk Connect for Kafka低于2.2.7的版本中，位于网络路径中的未认证用户能够读取或篡改通过Kerberos身份验证与Splunk Enterprise的HTTP事件收集器（Hypertext Transfer Protocol (HTTP) Event Collector）一起使用时由连接器发送的所有相关数据。该漏洞之所以存在，是因为在构建HTTP客户端时，Kerberos身份验证路径并未应用配置的证书验证选项。更多信息请参阅Splunk文档中的《安装Splunk Connect for Kafka》(https://help.splunk.com/en/data-management/integrate-data-with-add-ons/splunk-connect-for-kafka/2.2/install/install-splunk-connect-for-kafka)、《Splunk Connect for Kafka的安全配置》(https://help.splunk.com/en/splunk-enterprise/get-data-in/splunk-connect-for-kafka/2.2/configure/security-configurations-for-splunk-connect-for-kafka)以及《使用配置文件设置和使用HTTP事件收集器》(https://help.splunk.com/en/splunk-enterprise/get-data-in/get-started-with-getting-data-in/9.4/get-data-with-http-event-collector/set-up-and-use-http-event-collector-with-configuration-files)。
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.