Privilege escalation in Apache Cassandra



Risk Medium
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2023-30601
CWE-ID CWE-269
Exploitation vector Network
Public exploit N/A
Vulnerable software
 Cassandra
Server applications / Database software

Vendor Apache Foundation

Security Bulletin

This security bulletin contains one medium risk vulnerability.

1) Improper Privilege Management

EUVDB-ID: #VU76636

Risk: Medium

CVSSv4.0: 4.8 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2023-30601

CWE-ID: CWE-269 - Improper Privilege Management

Exploit availability: No

Description

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to improper privilege management when enabling FQL/Audit logs. A remote user with JMX access can execute arbitrary OS commands with privileges of the server.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cassandra: 4.0 - 4.1.1

CPE2.3 External links

https://issues.apache.org/jira/browse/CASSANDRA-18550


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###