[jira] [Resolved] (KAFKA-7702) Prefixed ACLs don't work with single character prefix

["Rajini Sivaram (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/KAFKA-7702?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rajini Sivaram resolved KAFKA-7702.
-----------------------------------
    Resolution: Fixed
      Reviewer: Jun Rao

> Prefixed ACLs don't work with single character prefix
> -----------------------------------------------------
>
>                 Key: KAFKA-7702
>                 URL: https://issues.apache.org/jira/browse/KAFKA-7702
>             Project: Kafka
>          Issue Type: Bug
>          Components: security
>    Affects Versions: 2.0.1, 2.1.0
>            Reporter: Rajini Sivaram
>            Assignee: Rajini Sivaram
>            Priority: Major
>             Fix For: 2.2.0, 2.1.1, 2.0.2
>
>
> Prefixed ACLs with a single character are not matched correctly against resource names. ALLOW rule with single character prefix doesn't grant access to any resource and DENY rule with single character prefix doesn't deny access to any resource since the prefix is not matched correctly.
> This is not an exploitable security vulnerability since only authenticated users with authorization to create ACLs can create the prefixed ACLs.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)