CVE-2020-13946

CVE-2020-13946 relates to an Apache Cassandra RMI registry manipulation vulnerability enabling a local attacker to perform a man-in-the-middle attack to capture JMX credentials and gain unauthorized access. The connected CIRCL entry confirms affected ranges: Cassandra 4.0.2 through 5.0.2 (Java 11...

CVE-2024-27137

In Apache Cassandra (versions 4.0.2 through 5.0.2 running Java 11 ), a local attacker without access to the process or configuration files can manipulate the RMI registry . This enables a man-in-the-middle attack to capture usernames and passwords used for the JMX interface , potentially leading ...