Azure Managed Instance for Apache Cassandra Elevation of Privilege Vulnerability

An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network...

Microsoft Azure Managed Instance for Apache Cassandra 访问控制错误漏洞

Microsoft Azure Managed Instance for Apache Cassandra is an Azure Managed Instance for Apache Cassandra is a service from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure Managed Instance for Apache Cassandra that stems from the presence of improper acces...

CVE-2024-42367 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, checkov, airflow, dask-gateway, nemo, kserve, request-1276...

GHSA-JWHX-XCG6-8XHJ vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, checkov, airflow, dask-gateway, nemo, kserve, request-1276...

Photon OS 3.0: Cassandra PHSA-2022-3.0-0364

An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0364. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Cassandra PHSA-2023-5.0-0020

An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Cassandra PHSA-2022-4.0-0157

An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-4.0-0157. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Cassandra PHSA-2023-4.0-0404

An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0404. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Cassandra PHSA-2017-0029

An update of the cassandra package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2017-0029. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GHSA-V2XM-76PQ-PHCF vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0...

GHSA-V2XM-76PQ-PHCF vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

CVE-2021-47621 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-5.0...

CVE-2021-47621 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

BIT-SCYLLADB-2023-33972 Privilege escalation from having CREATE access on a keyspace in Scylladb

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to access a table in the same keyspace, even if they don't have permissions for that table. This issue...

CVE-2024-27306 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, checkov, py3.13-scanner-test-libraries-aiohttp, dask-gateway, nemo, kserve, request-1276...

CVE-2024-27306 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, dask-gateway, kserve, checkov...

GHSA-7GPW-8WMC-PM8G vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, dask-gateway, kserve, checkov...

GHSA-7GPW-8WMC-PM8G vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, checkov, py3.13-scanner-test-libraries-aiohttp, dask-gateway, nemo, kserve, request-1276...

cassandra-rs's non-idiomatic use of iterators leads to use after free

Impact Code that attempts to use an item e.g., a row returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. Code that uses the item and then advances the iterator is unaffected. This problem has always existed...

GHSA-X9XC-63HG-VCFQ cassandra-rs's non-idiomatic use of iterators leads to use after free

Impact Code that attempts to use an item e.g., a row returned by an iterator after the iterator has advanced to the next item will be accessing freed memory and experience undefined behaviour. Code that uses the item and then advances the iterator is unaffected. This problem has always existed...