TI-2021-15833 CVE-2021-38153 · GHSA-3j6g-hxx5-3q26
Timing Attack Vulnerability for Apache Kafka Connect and Clients
Priority LOW 36
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful.