Apache Software Foundation Cassandra 4.1.1

CPE Details

Apache Software Foundation Cassandra 4.1.1
apache
cassandra
4.1.1
2023-06-05
14h15 +00:00
2023-06-26
09h35 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:apache:cassandra:4.1.1:*:*:*:*:*:*:*

Informations

Vendor

apache

Product

cassandra

Version

4.1.1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-30601 2023-05-30 07h25 +00:00 Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users. MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.
7.8
High