Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra

🗓️ 24 Feb 2022 11:07:34Reported by WoodenKlaasType 
githubexploit
 githubexploit🔗 github.com👁 3 Views

Exploit for Cassandra CVE-2021-44521 causes remote code execution via incorrect permission handling.

Related
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
3 Dec 202221:35
–githubexploit
GithubExploit		Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
24 Feb 202211:07
–githubexploit
GithubExploit		0day
11 Jun 202600:42
–githubexploit
IBM Security Bulletins		Security Bulletin: IBM Global Mailbox is vulnerable to remote code execution due to Apache Cassandra (CVE-2021-44521)
21 Jul 202312:42
–ibm
IBM Security Bulletins		Security Bulletin: Datastax Enterprise with IBM is vulnerable to exploiting Apache Cassandra User-Defined Functions for Remote Code Execution
23 Feb 202222:41
–ibm
IBM Security Bulletins		Security Bulletin: Netcool Operations Insight v1.6.5 contains fixes for multiple security vulnerabilities.
31 Aug 202211:45
–ibm
FreeBSD		cassandra3 -- arbitrary code execution
11 Feb 202200:00
–freebsd
Gitee		Exploit for Code Injection in Apache Cassandra
15 Jun 202314:30
–gitee
Gitee		Exploit for Code Injection in Apache Cassandra
29 Oct 202316:15
–gitee
BDU FSTEC		The vulnerability of the distributed database management system Apache Cassandra, related to improper code generation, allows a hacker to execute arbitrary code on the host.
21 Apr 202200:00
–bdu_fstec
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
18 Apr 2023 06:06Current
7.4High risk
Vulners AI Score7.4
CVSS 28.5
CVSS 3.19.1
EPSS0.54889
cassandrapermission handlingremote code executionuser defined functions
3