238 matches found
PT-2023-22802 · Apache · Apache Cassandra
Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 4.0.0 through 4.0.9 Apache Cassandra versions 4.1.0 through 4.1.1 Description: The issue is related to privilege escalation when enabling FQL/Audit logs, allowing a user with JMX access to run arbitrary commands as t...
K36212405: Apache Cassandra vulnerability CVE-2020-13946
Security Advisory Description In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and...
GHSA-MJMJ-J48Q-9WG2 vulnerabilities
Vulnerabilities for packages: metric-collector-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, cassandra-reaper...
Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
CVE-2021-44521 Automated PoC of CVE-2021-44521 Credits to orig...
CVE-2022-1471 vulnerabilities
Vulnerabilities for packages: metric-collector-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0, cassandra-reaper...
GHSA-W37G-RHQ8-7M4J vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-W37G-RHQ8-7M4J vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, hadoop-fips, management-api-for-apache-cassandra-4.1...
CVE-2022-41854 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, hadoop-fips, management-api-for-apache-cassandra-4.1...
CVE-2022-41854 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
CVE-2022-29240 Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla
Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is greater than the real one, part of...
GHSA-C4R9-R8FH-9VJ2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...
GHSA-9W3M-GQGF-C4P9 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...
GHSA-9W3M-GQGF-C4P9 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-98WM-3W3Q-MW94 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-HHHW-99GJ-P3C3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-C4R9-R8FH-9VJ2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-98WM-3W3Q-MW94 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...
GHSA-HHHW-99GJ-P3C3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1...