Archive

28 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /28 July 2018 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-8016

Missing Authentication for Critical Function in Apache Cassandra

The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225…

Apache Software Foundation Apache Cassandra org.apache.cassandra:cassandra-all Maven

Jun 28, 2018