Privilege Escalation

com.instaclustr:cassandra-lucene-index-plugin is vulnerable to Privilege Escalation. The vulnerability is due to a flaw in the Instaclustr fork of Stratio's Cassandra-Lucene-Index plugin, which allows authenticated users to bypass the RBAC mechanism and gain elevated privileges...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.0.0-rc3, <=1.0.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.0.0-rc3, <=1.0.6) +26 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.13.0)

org.apache.mesos:mesos MAVEN version 0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.0.0-rc3, =1.0.0-rc3, =1.0.0-beta1, =0.2.2, =0.2.2, =0.2....