Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatcveRedhat.comRH:CVE-2021-44521
HistoryFeb 12, 2022 - 2:23 a.m.

CVE-2021-44521

2022-02-1202:23:21
redhat.com
access.redhat.com
33

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

92.5%

JSON

A flaw was found in Cassandra that allows users with certain permissions to execute user-defined functions to create scripts and run remote code execution. This flaw allows an attacker to gain unwanted access and also execute actions against Cassandra.

Related

checkpoint_advisories 1
prion 1
osv 2
cve 1
cnvd 1
veracode 1
thn 2
githubexploit 1
nessus 1
hivepro 1
ibm 3
freebsd 1
github 1
photon 6
threatpost 1
checkpoint_advisories
checkpoint_advisories
Apache Cassandra Remote Code Execution (CVE-2021-44521)
2022-03-10 00:00:00
prion
prion
Code injection
2022-02-11 13:15:00
osv
osv
BIT-cassandra-2021-44521
2024-03-06 10:50:58
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
2022-02-12 00:00:48
cve
cve
CVE-2021-44521
2022-02-11 13:15:00
cnvd
cnvd
Apache Cassandra Code Injection Vulnerability
2022-02-15 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2022-02-14 04:33:14
thn
thn
High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
2022-02-16 05:18:00
Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data
2022-03-16 07:53:00
githubexploit
githubexploit
Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
2022-02-24 11:07:34
nessus
nessus
FreeBSD : cassandra3 -- arbitrary code execution (60624f63-9180-11ed-acbe-b42e991fc52e)
2023-01-12 00:00:00
hivepro
hivepro
Apache Cassandra database affected by easily exploitable Remote code execution
2022-02-18 12:40:54
ibm
ibm
Security Bulletin: Datastax Enterprise with IBM is vulnerable to exploiting Apache Cassandra User-Defined Functions for Remote Code Execution
2022-02-23 22:41:24
Security Bulletin: IBM Global Mailbox is vulnerable to remote code execution due to Apache Cassandra (CVE-2021-44521)
2023-07-21 12:42:12
Security Bulletin: Netcool Operations Insight v1.6.5 contains fixes for multiple security vulnerabilities.
2022-08-31 11:45:02
freebsd
freebsd
cassandra3 -- arbitrary code execution
2022-02-11 00:00:00
github
github
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
2022-02-12 00:00:48
photon
photon
Critical Photon OS Security Update - PHSA-2022-0443
2022-02-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0474
2022-02-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0157
2022-02-21 00:00:00
threatpost
threatpost
High-Severity RCE Bug Found in Popular Apache Cassandra Database
2022-02-16 16:03:32

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.046 Low

EPSS

Percentile

92.5%

JSON
Related for RH:CVE-2021-44521
checkpoint_advisories1prion1osv2cve1cnvd1veracode1thn2githubexploit1nessus1hivepro1ibm3freebsd1github1photon6threatpost1