com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.1 (>=3.0.0, <=3.1.0), com.instaclustr:cassandra-ldap-4.1.0 (1.0.0) +17 more potentially affected by CVE-2020-13946 +1 more via org.apache.cassandra:cassandra-all (>=4.1.0, <=4.1.6)

org.apache.cassandra:cassandra-all MAVEN version =4.1.0, =3.0.0, =4.1.0, =4.1.0, =4.1.0, =2.1.0-alpha-8, =0.13.0, =2.6.0, =2.10.0, =1.0-beta3, =3.15, =5.3 and more Source cves: CVE-2020-13946, CVE-2024-27137 Source advisory: SNYK:JAVA-ORGAPACHECASSANDRA-8688131...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.0 (>=2.9.0, <=3.1.0), com.instaclustr:cassandra-ldap-4.0.7 (1.0.0) +15 more potentially affected by CVE-2020-13946 +1 more via org.apache.cassandra:cassandra-all (>=4.0.2, <=4.0.13)

org.apache.cassandra:cassandra-all MAVEN version =4.0.2, =2.9.0, =0.16.0, =1.0.50, =1.0.50, =1.0.64, =2.2.0, =1.2.0, =1.5.0, =1.5.0, =1.2.0, =1.2.0, =3.9, =3.14 and more Source cves: CVE-2020-13946, CVE-2024-27137 Source advisory: SNYK:JAVA-ORGAPACHECASSANDRA-8688131...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.1 (>=3.0.0, <=3.1.0), com.instaclustr:cassandra-ldap-4.1.0 (1.0.0) +17 more potentially affected by CVE-2024-27137 via org.apache.cassandra:cassandra-all (>=4.1.0, <=4.1.6)

org.apache.cassandra:cassandra-all MAVEN version =4.1.0, =3.0.0, =4.1.0, =4.1.0, =4.1.0, =2.1.0-alpha-8, =0.13.0, =2.6.0, =2.10.0, =1.0-beta3, =3.15, =5.3 and more Source cves: CVE-2024-27137 Source advisory: OSV:GHSA-RGFX-7P65-3FF4...

CVE-2024-27137

In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these...

CVE-2024-27137 Apache Cassandra: unrestricted deserialization of JMX authentication credentials

In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these...

CVE-2024-27137

A local attacker without access to the Apache Cassandra process or configuration files can manipulate the RMI registry to execute a man-in-the-middle attack . This flaw allows the attacker to capture usernames and passwords used to access the JMX interface , subsequently enabling unauthorized ope...

CVE-2024-27137 Apache Cassandra: unrestricted deserialization of JMX authentication credentials

In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these...

CVE-2024-27137

creationtimestamp| type| source ---|---|--- 2025-02-03 23:49:35+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lhcq7q3mkr23 2025-02-04 10:16:22+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lhdtaj5dbn25 2025-02-04 10:28:35+00:00| seen|...