https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:04:23 +0000 https://cve.radiocsirt.org/vuln/bit-cassandra-2020-13946 <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.</p> <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.</p> https://cve.radiocsirt.org/vuln/bit-cassandra-2020-13946 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0537 certfr-2023-avi-0537 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0537 https://cve.radiocsirt.org/vuln/cnvd-2020-50259 cnvd-2020-50259 https://cve.radiocsirt.org/vuln/cnvd-2020-50259 https://cve.radiocsirt.org/vuln/euvd-2026-42080 EUVD-2026-42080 https://cve.radiocsirt.org/vuln/euvd-2026-42080 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13946 <p>In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.</p> <p>In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13946 https://cve.radiocsirt.org/vuln/ghsa-24ww-mc5x-xc43 <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.</p> <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.</p> https://cve.radiocsirt.org/vuln/ghsa-24ww-mc5x-xc43 https://cve.radiocsirt.org/vuln/gsd-2020-13946 gsd-2020-13946 https://cve.radiocsirt.org/vuln/gsd-2020-13946 https://cve.radiocsirt.org/vuln/rhsa-2021:0811 <p>cassandra: allows manipulation of the RMI registry to perform a MITM attack and capture user names and passwords used to access the JMX interface apache-httpclient: incorrect handling of malformed authority component in request URIs jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)</p> <p>cassandra: allows manipulation of the RMI registry to perform a MITM attack and capture user names and passwords used to access the JMX interface apache-httpclient: incorrect handling of malformed authority component in request URIs jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)</p> https://cve.radiocsirt.org/vuln/rhsa-2021:0811 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1737 <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Juniper Produkten ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern.</p> <p>Ein Angreifer aus dem angrenzenden Netzwerk oder ein entfernter anonymer oder lokaler Angreifer kann mehrere Schwachstellen in verschiedenen Juniper Produkten ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand auszulösen und seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1737