https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 08:31:03 +0000 https://cve.radiocsirt.org/vuln/bit-cassandra-2020-17516 <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using &#39;dc&#39; or &#39;rack&#39; internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.</p> <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using &#39;dc&#39; or &#39;rack&#39; internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.</p> https://cve.radiocsirt.org/vuln/bit-cassandra-2020-17516 https://cve.radiocsirt.org/vuln/cnvd-2021-11838 cnvd-2021-11838 https://cve.radiocsirt.org/vuln/cnvd-2021-11838 https://cve.radiocsirt.org/vuln/euvd-2026-43737 EUVD-2026-43737 https://cve.radiocsirt.org/vuln/euvd-2026-43737 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17516 <p>Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using &#39;dc&#39; or &#39;rack&#39; internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.</p> <p>Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using &#39;dc&#39; or &#39;rack&#39; internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-17516 https://cve.radiocsirt.org/vuln/ghsa-2vxm-vp4c-fjfw <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using &#39;dc&#39; or &#39;rack&#39; internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.</p> <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using &#39;dc&#39; or &#39;rack&#39; internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.</p> https://cve.radiocsirt.org/vuln/ghsa-2vxm-vp4c-fjfw https://cve.radiocsirt.org/vuln/gsd-2020-17516 gsd-2020-17516 https://cve.radiocsirt.org/vuln/gsd-2020-17516