CVE-2020-13946

creationtimestamp| type| source ---|---|--- 2025-02-04 10:28:35+00:00| seen| https://infosec.exchange/users/cve/statuses/113945143877511790 2025-02-04 14:07:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/113946004774033626 2025-02-04 14:43:21+00:00| seen|...

K36212405: Apache Cassandra vulnerability CVE-2020-13946

Security Advisory Description In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and...

com.datastax.spark:kafka-streaming_2.10 (>=1.1.0-beta2 <=1.1.0-rc3), com.datastax.spark:simple-demos_2.10 (>=1.1.0-beta2 <=1.1.0-rc3) +14 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.1.0 <=2.1.11)

org.apache.cassandra:cassandra-all MAVEN version =2.1.0, =1.1.0-beta2, =1.1.0-beta2, =1.1.0-alpha2, =1.1.0-alpha2, =0.80, =0.1.0, =2.1.10.0, =2.11.0, =0.6.2, =0.3.1, =0.3.1, =0.2.6, =0.2.6, =0.2.7 and more Source cves: CVE-2020-13946 Source advisory: OSV:GHSA-24WW-MC5X-XC43...

io.stargate.db.cassandra:persistence-cassandra-4.0 (>=0.0.2 <=1.0.1) potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (=4.0-beta1)

org.apache.cassandra:cassandra-all MAVEN version =4.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - io.stargate.db.cassandra:persistence-cassandra-4.0 =0.0.2, =1.0.1 Source cves:...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c2.2 (>=2.2.0 <=2.6.0), com.github.haifengl:unicorn-cassandra_2.11 (>=2.0.0 <=2.1.1) +40 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=2.2.0 <=2.2.16)

org.apache.cassandra:cassandra-all MAVEN version =2.2.0, =2.2.0, =2.0.0, =0.6.0, =0.6.0, =2.2.10.0, =1.2.2, =2.2.0, =2.2.0, =1.0.17.Final, =1.1.2.Final - org.hawkular.accounts:hawkular-accounts-sample-websocket-backend =1.0.17.Final - org.hawkular.accounts:hawkular-accounts-sample-websocket-secur...

ai.grakn.kgms:client (=1.4.3), ai.grakn:client-java (>=1.4.1 <=1.4.3) +157 more potentially affected by CVE-2020-13946 via org.apache.cassandra:cassandra-all (>=3.11.0 <=3.11.7)

org.apache.cassandra:cassandra-all MAVEN version =3.11.0, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.1, =1.4.3 and more Source cves: CVE-2020-13946 Source advisory: OSV:GHSA-24WW-MC5X-XC43...

Low: Red Hat Security Advisory: Red Hat Integration Tech-Preview 3 Camel K security update

An update to the Camel K operator image for Red Hat Integration tech-preview is now available. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Low. A Common...

Security Bulletin: IBM Network Performance Insight 1.3.1 affected by Apache Cassandra vulnerability (CVE-2020-13946)

Summary IBM Network Performance Insight 1.3.1 affected by Apache Cassandra vulnerability CVE-2020-13946 Vulnerability Details CVEID: CVE-2020-13946 DESCRIPTION: Apache Cassandra is vulnerable to a man-in-the-middle attack, caused by a RMI rebind vulnerability. By manipulating the RMI registry, an...

Photon OS 1.0: Cassandra PHSA-2020-1.0-0348

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0348. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Cassandra PHSA-2020-3.0-0179

An update of the cassandra package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0179. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and...

CVE-2020-13946

CVE-2020-13946 relates to an Apache Cassandra RMI registry manipulation vulnerability enabling a local attacker to perform a man-in-the-middle attack to capture JMX credentials and gain unauthorized access. The connected CIRCL entry confirms affected ranges: Cassandra 4.0.2 through 5.0.2 (Java 11...