Apache Cassandra is vulnerable to privilege escalation in an mTLS environment using MutualTlsAuthenticator

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-27314 · ADVISORY
• apache/cassandra commit b584a43 · WEB
• apache/cassandra · PACKAGE
• apache/cassandra release cassandra-5.0.7 · WEB
• lists.apache.org/thread/zrng82ddy4rpsmfyk582v6hqxcqrbz7f · WEB
• openwall.com/lists/oss-security/2026/04/07/7 · WEB

Lỗ hổng khác của org.apache.cassandra:cassandra-all

• CVE-2026-32588TRUNG BÌNH 6.5Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password change…
• CVE-2026-27315TRUNG BÌNH 5.5Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed…
• CVE-2025-26467CAO 8.8Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privil…
• CVE-2025-24860TRUNG BÌNH 5.4Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to…
• CVE-2024-27137TRUNG BÌNH 5.3In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate…