PT-2015-4531 · Apache · Apache Cassandra

Georgi Geshev · Published 2015-04-03 · Updated 2022-05-14 · CVE-2015-0225

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 1.2.0 through 1.2.19 Apache Cassandra versions 2.0.0 through 2.0.13 Apache Cassandra versions 2.1.0 through 2.1.3

Description The default configuration of Apache Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. This allows remote attackers to execute arbitrary Java code via an RMI request.

Recommendations For Apache Cassandra versions 1.2.0 through 1.2.19, restrict access to the JMX/RMI interface to minimize the risk of exploitation. For Apache Cassandra versions 2.0.0 through 2.0.13, restrict access to the JMX/RMI interface to minimize the risk of exploitation. For Apache Cassandra versions 2.1.0 through 2.1.3, restrict access to the JMX/RMI interface to minimize the risk of exploitation.

Fix

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2015-0225

GHSA-W7F2-GJXF-2GM9

Affected Products

Apache Cassandra

References · 9

• http://rhn.redhat.com/errata/RHSA-2015-1947.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-0225 · Security Note
• https://osv.dev/vulnerability/GHSA-w7f2-gjxf-2gm9 · Vendor Advisory
• http://securitytracker.com/id/1034002 · Note
• http://mail-archive.com/[e-mail]/msg41819.html · Note
• http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html · Note
• http://securityfocus.com/bid/73478 · Note
• http://mail-archive.com/user%40cassandra.apache.org/msg41819.html · Note
• http://securityfocus.com/archive/1/535154/100/0/threaded · Note