CVE-2023-30601CWE-269

Apache Cassandra: Privilege escalation when enabling FQL/Audit logs

High · published May 30, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

Privilege escalation when enabling FQL/Audit logs allows user with JMX access to run arbitrary commands as the user running Apache Cassandra

This issue affects Apache Cassandra: from 4.0.0 through 4.0.9, from 4.1.0 through 4.1.1.

WORKAROUND

The vulnerability requires nodetool/JMX access to be exploitable, disable access for any non-trusted users.

MITIGATION

Upgrade to 4.0.10 or 4.1.2 and leave the new FQL/Auditlog configuration property allow_nodetool_archive_command as false.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-05-30T07:25Z
EPSS history
Timeline
  • 30 MAY 07:25Z
    Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
    cvelistv5