Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users. MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.

An update of the cassandra package has been released.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as
    the user running Apache Cassandra This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from
    4.1.0 through 4.1.1. WORKAROUND The vulnerability requires nodetool/JMX access to be exploitable, disable
    access for any non-trusted users. MITIGATION Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog
    configuration property allow_nodetool_archive_command as false. (CVE-2023-30601)

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra. This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1. The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users. Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
332599	Photon OS 5.0: Cassandra PHSA-2023-5.0-91-0020	Nessus	PhotonOS Local Security Checks	Local	high
416884	SCA: security update for org.apache.cassandra:cassandra-all (GHSA-m9p2-j4hg-g373)	Tenable Cloud Security	SCA Checks	Local	high
416884	SCA: security update for org.apache.cassandra:cassandra-all (GHSA-m9p2-j4hg-g373)	Tenable Self-Hosted Container Security	SCA Checks	Local	high
204583	Photon OS 5.0: Cassandra PHSA-2023-5.0-0020	Nessus	PhotonOS Local Security Checks	Local	high
203396	Photon OS 4.0: Cassandra PHSA-2023-4.0-0404	Nessus	PhotonOS Local Security Checks	Local	high
181676	Apache Cassandra 4.0.x < 4.0.10 / 4.1.x < 4.1.2 Privilege Escalation	Nessus	Databases	Combined	high

Detections

Analytics

CVE-2023-30601

high

Tenable Plugins

high

high

high

high

high

high