Apache Software Foundation Apache Bookkeeper vulnerabilities

1 vulnerability

Known vulnerabilities in Apache Software Foundation Apache Bookkeeper, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.9CVE-2022-32531apache software foundationapache bookkeeper+4
EPSS score
1.09%
The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.