CVE-2020-13946

CVE-2020-13946 relates to an Apache Cassandra RMI registry manipulation vulnerability enabling a local attacker to perform a man-in-the-middle attack to capture JMX credentials and gain unauthorized access. The connected CIRCL entry confirms affected ranges: Cassandra 4.0.2 through 5.0.2 (Java 11...

CVE-2024-27137

A local attacker without access to the Apache Cassandra process or configuration files can manipulate the RMI registry to execute a man-in-the-middle attack . This flaw allows the attacker to capture usernames and passwords used to access the JMX interface , subsequently enabling unauthorized ope...