PT-2023-22802 · Apache · Apache Cassandra

Gal Elbaz · Publicado 2023-05-30 · Atualizado 2024-03-06 · CVE-2023-30601

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 4.0.0 through 4.0.9 Apache Cassandra versions 4.1.0 through 4.1.1

Description The issue is related to privilege escalation when enabling FQL/Audit logs, allowing a user with JMX access to run arbitrary commands as the user running Apache Cassandra. To exploit this issue, nodetool/JMX access is required.

Recommendations For Apache Cassandra versions 4.0.0 through 4.0.9, upgrade to 4.0.10 and leave the new FQL/Auditlog configuration property allow nodetool archive command as false. For Apache Cassandra versions 4.1.0 through 4.1.1, upgrade to 4.1.2 and leave the new FQL/Auditlog configuration property allow nodetool archive command as false. As a temporary workaround, consider disabling access for any non-trusted users to prevent exploitation.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

BIT-CASSANDRA-2023-30601

CVE-2023-30601

GHSA-M9P2-J4HG-G373

Produtos afetados

Apache Cassandra

Referências · 12

• https://github.com/apache/cassandra · Nota
• https://github.com/apache/cassandra/commit/aafb4d19448f12ce600dc4e84a5b181308825b32 · Nota
• https://github.com/apache/cassandra/commit/22d74c711658507addfd67e2c78b04a9b88413b2 · Nota
• https://t.me/cvenotify/51760 · Publicação no Telegram
• https://lists.apache.org/thread/f74p9jdhmmp7vtrqd8lgm8bq3dhxl8vn · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-30601 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-30601 · Nota de Segurança
• https://issues.apache.org/jira/browse/CASSANDRA-18550 · Nota
• https://osv.dev/vulnerability/GHSA-m9p2-j4hg-g373 · Aviso do Fabricante
• https://t.me/pentestingnews/36385 · Publicação no Telegram
• https://osv.dev/vulnerability/BIT-cassandra-2023-30601 · Aviso do Fabricante
• https://t.me/cvenotify/51353 · Publicação no Telegram