699 matches found
CVE-2025-23015 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...
CVE-2025-23015 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...
CVE-2025-23015
CVE-2025-23015 is an Apache Cassandra privilege escalation issue: a user with MODIFY permission ON ALL KEYSPACES can escalate to superuser by exploiting unsafe actions on a system resource. Affected versions include Cassandra 3.0.30, 3.11.17, 4.0.15, 4.1.7, and 5.0.2. Remediation is to upgrade to...
Apache Cassandra 安全漏洞
Apache Cassandra is a distributed Nosql database from the American Apache Apache Foundation. Apache Cassandra suffers from an authorization issue vulnerability that stems from the inclusion of an incorrect authorization, which can be exploited by an attacker to access a datacenter or IP/CIDR grou...
Apache Cassandra Detection Consolidation
Consolidation of Apache Cassandra detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...
Apache Cassandra 安全漏洞
Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra that originates from a vulnerability that allows a local attacker to perform a man-in-the-middle attack by manipulating the RMI registry to capture usernames and...
Apache Cassandra 安全漏洞
Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra that originates from the fact that a user with MODIFY privileges and a privilege range of ON ALL KEYSPACES can elevate privileges to superuser in the target Cassand...
PT-2025-5589 · Apache · Apache Cassandra
Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 4.0.0 through 4.0.15 Apache Cassandra versions 4.1.0 through 4.1.7 Apache Cassandra versions 5.0.0 through 5.0.2 Description: The issue allows users to access a datacenter or IP/CIDR groups they should not be able to...
PT-2025-4767 · Apache · Apache Cassandra
Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2 Description: A privilege escalation issue exists in Apache Cassandra, where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted...
GHSA-6V67-2WR5-GVF4 vulnerabilities
Vulnerabilities for packages: tez, apache-nifi, sonarqube-10, management-api-for-apache-cassandra-5.0, zookeeper-fips, management-api-for-apache-cassandra-4.1, akhq, management-api-for-apache-cassandra-4.0, cassandra-reaper, dependency-track, cassandra, sonar-scanner-cli, ontop, ontop-fips,...
GHSA-PR98-23F8-JWXV vulnerabilities
Vulnerabilities for packages: tez, apache-nifi, sonarqube-10, management-api-for-apache-cassandra-5.0, zookeeper-fips, management-api-for-apache-cassandra-4.1, akhq, management-api-for-apache-cassandra-4.0, cassandra-reaper, dependency-track, cassandra, sonar-scanner-cli, ontop, ontop-fips,...
CVE-2024-12801 vulnerabilities
Vulnerabilities for packages: tez, apache-nifi, sonarqube-10, management-api-for-apache-cassandra-5.0, zookeeper-fips, management-api-for-apache-cassandra-4.1, akhq, management-api-for-apache-cassandra-4.0, cassandra-reaper, dependency-track, cassandra, sonar-scanner-cli, ontop, ontop-fips,...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: tez, apache-nifi, sonarqube-10, management-api-for-apache-cassandra-5.0, zookeeper-fips, management-api-for-apache-cassandra-4.1, akhq, management-api-for-apache-cassandra-4.0, cassandra-reaper, dependency-track, cassandra, sonar-scanner-cli, ontop, ontop-fips,...
GHSA-RQC4-2HC7-8C8V vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, request-1276...
GHSA-RQC4-2HC7-8C8V vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa...
CVE-2024-53899 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, request-1276...
CVE-2024-53899 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa...
GHSA-8495-4G3G-X7PR vulnerabilities
Vulnerabilities for packages: awx, checkov, py3-cassandra-medusa, airflow, py3.13-scanner-test-libraries-aiohttp, request-1276, kserve, dask-gateway, py3-aiohttp...