https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 04:31:12 +0000 https://cve.radiocsirt.org/vuln/cve-2024-27137 <p><strong>Affected:</strong> Apache Software Foundation Apache Cassandra</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Cassandra</p> <p>In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorized operations.</p> <p>This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.</p> <p>This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.</p> <p>Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2024-27137