CVE:CVE-2019-12399
CNNVD:CNNVD-202001-438
Apache Kafka是美国阿帕奇（Apache）基金会的一套开源的分布式流媒体平台。该平台能够获取实时数据，用于构建对数据流的变化进行实时反应的应用程序。
Apache Kafka中存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。以下产品及版本受到影响：Apache Kafka 2.0.0版本，2.0.1版本，2.1.0版本，2.1.1版本，2.2.0版本，2.2.1版本，2.3.0版本。
solution:Upgrade apache kafka to a higher version than 2.0.0,2.0.1,2.1.0,2.1.1,2.2.0,2.2.1,2.3.0,and avoid the version 2.0.0,2.0.1,2.1.0,2.1.1,2.2.0,2.2.1,2.3.0; Upgrade oracle banking_corporate_lending_process_management to a higher version than 14.1.0,14.3.0,14.4.0,and avoid the version 14.1.0,14.3.0,14.4.0; Upgrade oracle banking_credit_facilities_process_management to a higher version than 14.1.0,14.3.0,14.4.0,and avoid the version 14.1.0,14.3.0,14.4.0; Upgrade oracle banking_liquidity_management to a higher version than 14.4.0,and avoid the version [14.0.0,14.4.0]; Upgrade oracle banking_payments to a higher version than 14.4.0,and avoid the version 14.4.0; Upgrade oracle banking_platform to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_supply_chain_finance to a higher version than 14.4.0,and avoid the version [14.2.0,14.4.0]; Upgrade oracle banking_trade_finance_process_management to a higher version than 14.1.0,14.3.0,14.4.0,and avoid the version 14.1.0,14.3.0,14.4.0; Upgrade oracle banking_virtual_account_management to a higher version than 14.1.0,14.3.0,14.4.0,and avoid the version 14.1.0,14.3.0,14.4.0; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.9.0,and avoid the version 1.9.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.0,and avoid the version [8.0.6,8.1.0]; Upgrade oracle flexcube_universal_banking to a higher version than 14.4.0,and avoid the version 14.4.0