Summary
Ein Angreifer kann mehrere Schwachstellen in Apache Cassandra ausnutzen, um Informationen offenzulegen, oder seine Rechte zu erhöhen.
Product
Apache Cassandra ist ein verteiltes, NoSQL-Datenbanksystem
Vulnerabilities 3
-
High 8.8
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data …
-
Medium 5.4
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update …
-
Medium 5.3
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX inte…
Revision history
-
#2
Plattformauswahl angepasst
-
#1
Initiale Fassung
References
-
Apache Mailing List vom 2025-02-03
https://lists.apache.org/thread/jmks4msbgkl65ssg69x728sv1m0hwz3s
-
Apache Mailing List vom 2025-02-03
https://lists.apache.org/thread/jsk87d9yv8r204mgqpz1qxtp5wcrpysm
-
Apache Mailing List vom 2025-02-03
https://lists.apache.org/thread/yjo5on4tf7s1r9qklc4byrz30b8vkm2d