> For the complete documentation index, see [llms.txt](https://icybersec.gitbook.io/cybersecuritynote-en/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://icybersec.gitbook.io/cybersecuritynote-en/security-vulnerability/unauthorized-vulnerability/unauthorized-access-vulnerability-in-kafka-manager.md).

# Unauthorized Access Vulnerability in Kafka Manager

## Vulnerability Description

Kafka Manager is a tool for managing and monitoring Apache Kafka clusters. If Kafka Manager is not properly configured and exposed to the internet, attackers may be able to access it without authorization and obtain sensitive information such as the configuration and usage of the Kafka cluster.

Additionally, if an attacker has sufficient permissions, they can also manipulate the Kafka cluster, such as creating topics and modifying configurations, posing a threat to the system.

## Environment Setup

zookeeper

```
docker run -d  -p 2181:2181 -e TZ="Asia/Shanghai" wurstmeister/zookeeper:latest
```

kafka-manager

```
docker run -d -p 9000:9000 -e ZK_HOSTS=192.168.32.183:2181 sheepkiller/kafka-manager:latest
```

## Vulnerability Exploitation

Access port 9000 to access the Kafka management interface without authorization.

![image-20220726161407438](https://3024627155-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FXR7Pin8lqeHtCxmQjCpG%2Fuploads%2Fgit-blob-da3333a257ec669a18178ed1de2daf4c1d4f4b46%2Fimage-20220726161407438.png?alt=media)

View cluster information.

![image-20230129211943784](https://github.com/yingshang/CybersecurityNote_en/blob/master/.gitbook/assets/image-20230129211943784.png)