Rajini Sivaram created KAFKA-7702:
-------------------------------------

             Summary: Prefixed ACLs don't work with single character prefix
                 Key: KAFKA-7702
                 URL: https://issues.apache.org/jira/browse/KAFKA-7702
             Project: Kafka
          Issue Type: Bug
          Components: security
    Affects Versions: 2.1.0, 2.0.1
            Reporter: Rajini Sivaram
            Assignee: Rajini Sivaram
             Fix For: 2.2.0, 2.1.1, 2.0.2


Prefixed ACLs with a single character are not matched correctly against 
resource names. ALLOW rule with single character prefix doesn't grant access to 
any resource and DENY rule with single character prefix doesn't deny access to 
any resource since the prefix is not matched correctly.

This is not an exploitable security vulnerability since only authenticated 
users with authorization to create ACLs can create the prefixed ACLs.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to