https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:46:12 +0000 https://cve.radiocsirt.org/vuln/bit-cassandra-2023-30601 <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.</p> <p>WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.</p> <p>MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.</p> <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.</p> <p>WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.</p> <p>MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.</p> https://cve.radiocsirt.org/vuln/bit-cassandra-2023-30601 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0791 certfr-2023-avi-0791 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0791 https://cve.radiocsirt.org/vuln/euvd-2026-194569 EUVD-2026-194569 https://cve.radiocsirt.org/vuln/euvd-2026-194569 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30601 <p>Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.</p> <p>WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.</p> <p>MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.</p> <p>Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.</p> <p>WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.</p> <p>MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-30601 https://cve.radiocsirt.org/vuln/ghsa-m9p2-j4hg-g373 <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.</p> <p>WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.</p> <p>MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.</p> <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.</p> <p>WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.</p> <p>MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.</p> https://cve.radiocsirt.org/vuln/ghsa-m9p2-j4hg-g373 https://cve.radiocsirt.org/vuln/gsd-2023-30601 gsd-2023-30601 https://cve.radiocsirt.org/vuln/gsd-2023-30601 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1310 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Cassandra ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Cassandra ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1310