CVE-2023-30601 Apache Cassandra: Privilege escalation when enabling FQL/Audit logs

🗓️ 30 May 2023 07:25:49Reported by apacheType

CVE-2023-30601 Privilege escalation via Apache Cassandra FQL/Audit log

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics Predictive Insights v1.3.6 ifix7 contains fixes for multiple security vulnerabilities.	11 Oct 202314:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Global Mailbox is vulnerable to privilege escalation attack due to Apache Cassandra	26 Sep 202305:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Apache Cassandra (CVE-2023-30601)	15 Jul 202300:12	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Apache Cassandra , IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to an authenticated attacker to gaining elevated privileges.	5 Sep 202310:15	–	ibm
Tenable Nessus	Apache Cassandra 4.0.x < 4.0.10 / 4.1.x < 4.1.2 Privilege Escalation	20 Sep 202300:00	–	nessus
Tenable Nessus	Photon OS 4.0: Cassandra PHSA-2023-4.0-0404	23 Jul 202400:00	–	nessus
Tenable Nessus	Photon OS 5.0: Cassandra PHSA-2023-5.0-0020	24 Jul 202400:00	–	nessus
Chainguard	CVE-2023-30601 vulnerabilities	30 May 202308:15	–	cgr
CNNVD	Apache Cassandra 安全漏洞	30 May 202300:00	–	cnnvd
CVE	CVE-2023-30601	30 May 202307:25	–	cve

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Cassandra",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "4.0.9",
        "status": "affected",
        "version": "4.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "4.1.1",
        "status": "affected",
        "version": "4.1.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread/f74p9jdhmmp7vtrqd8lgm8bq3dhxl8vn

30 May 2023 07:25Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.8

EPSS0.00021

CWE-269