696 matches found
SUSE CVE-2020-17516
Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internodeencryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despit...
SUSE CVE-2021-44521
When running Apache Cassandra with the following configuration: enableuserdefinedfunctions: true enablescripteduserdefinedfunctions: true enableuserdefinedfunctionsthreads: false it is possible for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissio...
GHSA-MJMJ-J48Q-9WG2 vulnerabilities
Vulnerabilities for packages: metric-collector-for-apache-cassandra-4.1, cassandra-reaper, management-api-for-apache-cassandra-5.0...
Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
CVE-2021-44521 Automated PoC of CVE-2021-44521 Credits to orig...
CVE-2022-1471 vulnerabilities
Vulnerabilities for packages: metric-collector-for-apache-cassandra-4.1, cassandra-reaper, management-api-for-apache-cassandra-5.0...
GHSA-W37G-RHQ8-7M4J vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-W37G-RHQ8-7M4J vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, hadoop-fips...
CVE-2022-41854 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
CVE-2022-41854 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, hadoop-fips...
CVE-2022-29240 Uninitialized memory read in LZ4 decompression leads to authentication bypass in Scylla
Scylla is a real-time big data database that is API-compatible with Apache Cassandra and Amazon DynamoDB. When decompressing CQL frame received from user, Scylla assumes that user-provided uncompressed length is correct. If user provides fake length, that is greater than the real one, part of...
GHSA-9W3M-GQGF-C4P9 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0...
GHSA-C4R9-R8FH-9VJ2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0...
GHSA-9W3M-GQGF-C4P9 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-98WM-3W3Q-MW94 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0...
GHSA-HHHW-99GJ-P3C3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0...
GHSA-98WM-3W3Q-MW94 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-C4R9-R8FH-9VJ2 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...
GHSA-HHHW-99GJ-P3C3 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...