PT-2015-4531 · Apache · Apache Cassandra

Georgi Geshev · Publicado 2015-04-03 · Atualizado 2022-05-14 · CVE-2015-0225

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 1.2.0 through 1.2.19 Apache Cassandra versions 2.0.0 through 2.0.13 Apache Cassandra versions 2.1.0 through 2.1.3

Description The default configuration of Apache Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. This allows remote attackers to execute arbitrary Java code via an RMI request.

Recommendations For Apache Cassandra versions 1.2.0 through 1.2.19, restrict access to the JMX/RMI interface to minimize the risk of exploitation. For Apache Cassandra versions 2.0.0 through 2.0.13, restrict access to the JMX/RMI interface to minimize the risk of exploitation. For Apache Cassandra versions 2.1.0 through 2.1.3, restrict access to the JMX/RMI interface to minimize the risk of exploitation.

Correção

RCE

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2015-0225

GHSA-W7F2-GJXF-2GM9

Produtos afetados

Apache Cassandra

Referências · 9

• http://securitytracker.com/id/1034002 · Nota
• http://mail-archive.com/[e-mail]/msg41819.html · Nota
• http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html · Nota
• http://rhn.redhat.com/errata/RHSA-2015-1947.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-0225 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-w7f2-gjxf-2gm9 · Aviso do Fabricante
• http://securityfocus.com/bid/73478 · Nota
• http://mail-archive.com/user%40cassandra.apache.org/msg41819.html · Nota
• http://securityfocus.com/archive/1/535154/100/0/threaded · Nota