https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 22:23:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-01150 bdu:2025-01150 https://cve.radiocsirt.org/vuln/bdu:2025-01150 https://cve.radiocsirt.org/vuln/bit-cassandra-2024-27137 <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> <p><strong>Affected:</strong> Bitnami: cassandra</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> https://cve.radiocsirt.org/vuln/bit-cassandra-2024-27137 https://cve.radiocsirt.org/vuln/cleanstart-2026-am31926 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra</p> <p>Package cassandra version 4.1.9-r0 fixes 2 vulnerabilities: CVE-2025-23015, CVE-2024-27137</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: cassandra</p> <p>Package cassandra version 4.1.9-r0 fixes 2 vulnerabilities: CVE-2025-23015, CVE-2024-27137</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-am31926 https://cve.radiocsirt.org/vuln/euvd-2026-217788 EUVD-2026-217788 https://cve.radiocsirt.org/vuln/euvd-2026-217788 https://cve.radiocsirt.org/vuln/fkie_cve-2024-27137 <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-27137 https://cve.radiocsirt.org/vuln/ghsa-rgfx-7p65-3ff4 <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.cassandra:cassandra-all</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-rgfx-7p65-3ff4 https://cve.radiocsirt.org/vuln/gsd-2024-27137 gsd-2024-27137 https://cve.radiocsirt.org/vuln/gsd-2024-27137 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0258 <p>Ein Angreifer kann mehrere Schwachstellen in Apache Cassandra ausnutzen, um Informationen offenzulegen, oder seine Rechte zu erhöhen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache Cassandra ausnutzen, um Informationen offenzulegen, oder seine Rechte zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0258