Description

Cassandra is an open source distributed NoSQL database

Cassandra is designed to be accessed by trusted clients inside trusted environments. It's not recommended to have Cassandra service publicly accessible.

Remediation

It's recommended to restrict access to this service on production systems

References

Cassandra Security

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2158)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-5615)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2266)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.26)

WordPress 5.7 Multiple Vulnerabilities (5.7)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration