Help Center/ MapReduce Service/ Product Bulletin/ Vulnerability Notice/ MRS Fastjson Vulnerability Remediation Guide/ Remediating Kafka
Updated on 2024-08-28 GMT+08:00
View PDF
Share

Remediating Kafka

Prerequisites

You have obtained the URL and admin account for logging in to FusionInsight Manager.

Procedure

  1. Log in to FusionInsight Manager and choose Cluster > Services > Kafka. Click Configurations then All Configurations. On this sub-tab page, search for the KAFKAUI_HEAP_OPTS parameter. Add -Dfastjson.parser.safeMode=true to the Value column of KAFKAUI_HEAP_OPT (leave a space between the existing value and -Dfastjson.parser.safeMode=true).

    For example, if the existing value is -Xmx4G -Xms4G, the new value is -Xmx4G -Xms4G -Dfastjson.parser.safeMode=true.

  2. Click Save. On the Instance tab page, select all KafkaUI instances and choose More > Restart Instance.

  3. Log in to any KafkaUI node as user omm and check the process:

    ps -ef | grep KafkaUI

    If the -Dfastjson.parser.safeMode=true parameter exists, the vulnerability has been mitigated.