CVE-2024-27137

In Apache Cassandra it is possible for a local attacker without accessto the Apache Cassandra process or configuration files to manipulatethe RMI registry to perform a man-in-the-middle attack and capture usernames and passwords used to access the JMX interface. The attacker canthen use these crede...