CVE-2021-27400

HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) were affected by not validating TLS certificates when connecting to Cassandra clusters. Root cause reported as missing TLS hostname/certificate validation in the Cassandra integration ...

PT-2021-17439 · Hashicorp +1 · Hashicorp Vault +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions prior to 1.6.4 HashiCorp Vault and Vault Enterprise versions prior to 1.7.1 Description: The issue concerns the failure to validate TLS certificates when connecting to Cassandra clusters, affectin...

Vault’s Cassandra Integrations Did Not Validate TLS Certificates

Summary Vault and Vault Enterprise “Vault” Cassandra integrations, a Vault storage backend and database secrets engine plugin, did not validate TLS certificates when connecting to Cassandra clusters. This vulnerability, CVE-2021-27400, was fixed in Vault and Vault Enterprise 1.6.4 and 1.7.1...

Security Bulletin: IBM Network Performance Insight 1.3.1 was affected by CVE-2020-17516 in Apache Cassandra.

Summary IBM Network Performance Insight 1.3.1 was affected by CVE-2020-17516 in Apache Cassandra. Vulnerability Details CVEID: CVE-2020-17516 DESCRIPTION: Apache Cassandra could allow a remote attacker to bypass security restrictions, caused by not enforcing encryption setting on inbound internod...

Photon OS 4.0: Cassandra PHSA-2021-4.0-0003

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-4.0-0003. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Sumanth Pasupuleti Priam 安全漏洞

Sumanth Pasupuleti Priam is an open source application by Sumanth Pasupuleti. A process/tool that runs with Apache Cassandra. Sumanth Pasupuleti Priam has a security vulnerability that can be exploited by an attacker to read anything written by the Priam process...

Important Photon OS Security Update - PHSA-2021-0003

Updates of 'cassandra' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-4.0-0003

Updates of 'cassandra' packages of Photon OS have been released...

cassandra: allows manipulation of the RMI registry to perform a MITM attack and capture user names and passwords used to access the JMX interface

A flaw was found in cassandra in versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2. A local attacker without access to the Apache Cassandra process or configuration files can manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used t...

Low: Red Hat Security Advisory: Red Hat Integration Tech-Preview 3 Camel K security update

An update to the Camel K operator image for Red Hat Integration tech-preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Low. A Common...

Photon OS 2.0: Cassandra PHSA-2021-2.0-0319

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0319. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-2.0-0319

An update of 'cassandra' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2021-0319

Updates of 'cassandra' packages of Photon OS have been released...

Photon OS 3.0: Cassandra PHSA-2021-3.0-0193

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0193. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Cassandra PHSA-2021-1.0-0359

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0359. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2021-1.0-0359

An update of 'cassandra' packages of Photon OS has been released...

Important Photon OS Security Update - PHSA-2021-3.0-0193

Updates of 'cassandra', 'linux-aws', 'linux', 'linux-secure', 'linux-esx', 'linux-rt', 'glibc' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0193

Updates of 'glibc', 'linux-rt', 'linux-esx', 'linux', 'cassandra', 'linux-secure', 'linux-aws' packages of Photon OS have been released...

@glossgenius/eslint-config (>=1.0.2, <=1.0.7), @halonext/nestjs-express-cassandra (>=7.0.0, <=7.1.0) +7 more potentially affected by CVE-2021-26707 via merge-deep (>=3.0.0, <=3.0.2)

merge-deep NPM version =3.0.0, =1.0.2, =7.0.0, =5.2.0, =6.0.1, =0.0.1, =0.1.0-rc0, =0.0.11, =1.0.0, =1.2.4 Source cves: CVE-2021-26707 Source advisory: SNYK:JS-MERGEDEEP-1070277...

Man-in-the-Middle (MitM)

apache cassandra is vulnerable to Man-in-the-Middle MitM. When using ‘dc or ‘rack internodeencryption setting, both an encrypted and unencrypted connection are allowed due to insecure configurations. A man-in-the-middle attacker is able to intercept and modify network traffic...