Skip to content
Threat Feed
Subscribe

Product

Splunk Connect for Kafka (< 2.2.7)

1 brief RSS
high advisory

Credential Exposure in Splunk Connect for Kafka via HEC Configuration

Splunk Connect for Kafka versions below 2.2.7 are vulnerable to credential theft through an unauthenticated REST API endpoint, allowing attackers to redirect HEC traffic to malicious servers.

Splunk Connect for Kafka credential-exposure api-vulnerability splunk
1t 1c