High

Analysis Summary

CVE-2024-27309 CVSS:7.5

Apache Kafka is vulnerable to a denial of service, caused by improper access control during migration from ZK mode to KRaft mode. By sending a specially crafted request, a remote attacker could exploit this vulnerability to cause a denial of service condition.

CVE-2024-31391 CVSS:6.5

Apache Solr Operator could allow a remote authenticated attacker to obtain sensitive information, caused by the insertion of sensitive information into log file when authentication is in use. By gaining access to the log file, an attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.