Description

Cassandra is an open source distributed NoSQL database

Cassandra is designed to be accessed by trusted clients inside trusted environments. It's not recommended to have Cassandra service publicly accessible.

Remediation

It's recommended to restrict access to this service on production systems

References

Cassandra Security

Related Vulnerabilities

Pyramid DebugToolbar enabled

JBoss Web Console JMX Invoker

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-8393)

Unprotected Apache NiFi API interface

SugarCRM Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3803)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration