When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissions to create user defined functions in the cluster to be able to exploit this. Note that this configuration is documented as unsafe, and will continue to be considered unsafe after this CVE.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - When running Apache Cassandra with the following configuration: enable_user_defined_functions: true
    enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible
    for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissions
    to create user defined functions in the cluster to be able to exploit this. Note that this configuration
    is documented as unsafe, and will continue to be considered unsafe after this CVE. (CVE-2021-44521)

An update of the cassandra package has been released.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 60624f63-9180-11ed-acbe-b42e991fc52e advisory.

  - When running Apache Cassandra with the following configuration: enable_user_defined_functions: true     enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible     for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissions     to create user defined functions in the cluster to be able to exploit this. Note that this configuration     is documented as unsafe, and will continue to be considered unsafe after this CVE. (CVE-2021-44521)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
412624	SCA: security update for org.apache.cassandra:cassandra-all (GHSA-8ffc-79xg-29w8)	Tenable Cloud Security	SCA Checks	critical
412624	SCA: security update for org.apache.cassandra:cassandra-all (GHSA-8ffc-79xg-29w8)	Tenable Self-Hosted Container Security	SCA Checks	critical
203748	Photon OS 3.0: Cassandra PHSA-2022-3.0-0364	Nessus	PhotonOS Local Security Checks	critical
203487	Photon OS 4.0: Cassandra PHSA-2022-4.0-0157	Nessus	PhotonOS Local Security Checks	critical
169935	FreeBSD : cassandra3 -- arbitrary code execution (60624f63-9180-11ed-acbe-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2021-44521

critical

Tenable Plugins

critical

critical

critical

critical

critical