Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:34182
HistoryFeb 14, 2022 - 4:33 a.m.

Remote Code Execution (RCE)

2022-02-1404:33:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
53

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

JSON

cassandra-all is vulnerable to remote code execution. When enable_user_defined_functions, enable_scripted_user_defined_functions, and enable_scripted_user_defined_functions are set, an attacker can inject and execute malicious code on the host through the scripted UDFs.

Related

redhatcve 1
cve 1
checkpoint_advisories 1
prion 1
osv 2
cnvd 1
thn 2
githubexploit 1
nessus 1
hivepro 1
ibm 3
freebsd 1
github 1
photon 6
threatpost 1
redhatcve
redhatcve
CVE-2021-44521
2022-02-12 02:23:21
cve
cve
CVE-2021-44521
2022-02-11 13:15:00
checkpoint_advisories
checkpoint_advisories
Apache Cassandra Remote Code Execution (CVE-2021-44521)
2022-03-10 00:00:00
prion
prion
Code injection
2022-02-11 13:15:00
osv
osv
BIT-cassandra-2021-44521
2024-03-06 10:50:58
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
2022-02-12 00:00:48
cnvd
cnvd
Apache Cassandra Code Injection Vulnerability
2022-02-15 00:00:00
thn
thn
High-Severity RCE Security Bug Reported in Apache Cassandra Database Software
2022-02-16 05:18:00
Multiple Flaws Uncovered in ClickHouse OLAP Database System for Big Data
2022-03-16 07:53:00
githubexploit
githubexploit
Exploit for Incorrect Permission Assignment for Critical Resource in Apache Cassandra
2022-02-24 11:07:34
nessus
nessus
FreeBSD : cassandra3 -- arbitrary code execution (60624f63-9180-11ed-acbe-b42e991fc52e)
2023-01-12 00:00:00
hivepro
hivepro
Apache Cassandra database affected by easily exploitable Remote code execution
2022-02-18 12:40:54
ibm
ibm
Security Bulletin: Datastax Enterprise with IBM is vulnerable to exploiting Apache Cassandra User-Defined Functions for Remote Code Execution
2022-02-23 22:41:24
Security Bulletin: IBM Global Mailbox is vulnerable to remote code execution due to Apache Cassandra (CVE-2021-44521)
2023-07-21 12:42:12
Security Bulletin: Netcool Operations Insight v1.6.5 contains fixes for multiple security vulnerabilities.
2022-08-31 11:45:02
freebsd
freebsd
cassandra3 -- arbitrary code execution
2022-02-11 00:00:00
github
github
Apache Cassandra vulnerable to Code Injection due to unsafe configuration
2022-02-12 00:00:48
photon
photon
Critical Photon OS Security Update - PHSA-2022-0443
2022-02-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0474
2022-02-21 00:00:00
Critical Photon OS Security Update - PHSA-2022-0157
2022-02-21 00:00:00
threatpost
threatpost
High-Severity RCE Bug Found in Popular Apache Cassandra Database
2022-02-16 16:03:32

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

JSON
Related for VERACODE:34182
redhatcve1cve1checkpoint_advisories1prion1osv2cnvd1thn2githubexploit1nessus1hivepro1ibm3freebsd1github1photon6threatpost1