In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible
    for a local attacker without access to the Apache Cassandra process or configuration files to manipulate
    the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access
    the JMX interface. The attacker can then use these credentials to access the JMX interface and perform
    unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables
    this issue to be exploited remotely. (CVE-2020-13946)

An update of the cassandra package has been released.

The version of Apache Cassandra running on the remote host is prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2.  It is, therefore, affected by information disclosure vulnerability. An unauthenticated, local attacker without access to the Apache Cassandra process or configuration files can manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. A JRE vulnerability (CVE-2019-2684) enables this issue to be exploited remotely. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
408676	SCA: security update for org.apache.cassandra:cassandra-all (GHSA-24ww-mc5x-xc43)	Tenable Cloud Security	SCA Checks	medium
408676	SCA: security update for org.apache.cassandra:cassandra-all (GHSA-24ww-mc5x-xc43)	Tenable Self-Hosted Container Security	SCA Checks	medium
144521	Photon OS 1.0: Cassandra PHSA-2020-1.0-0348	Nessus	PhotonOS Local Security Checks	medium
144513	Photon OS 3.0: Cassandra PHSA-2020-3.0-0179	Nessus	PhotonOS Local Security Checks	medium
143421	Apache Cassandra < 2.1.22 / 2.2.x < 2.2.18 / 3.0.x < 3.0.22 / 3.11.x < 3.11.8 Information Disclosure Vulnerability	Nessus	Databases	medium

Detections

Analytics

CVE-2020-13946

medium

Tenable Plugins

medium

medium

medium

medium

medium