logo_clicknbuy.png

CVE-2024-27137 – Apache Cassandra RMI Registry Man-in-the-Middle Authentication Bypass

The following table lists the changes that have been made to the
CVE-2024-27137 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Feb. 04, 2025

    Action Type Old Value New Value
    Added Description In Apache Cassandra it is possible for a local attacker without access
    to the Apache Cassandra process or configuration files to manipulate
    the RMI registry to perform a man-in-the-middle attack and capture user
    names and passwords used to access the JMX interface. The attacker can
    then use these credentials to access the JMX interface and perform
    unauthorized operations.

    This is same vulnerability that CVE-2020-13946 was issued for, but the Java option was changed in JDK10.

    This issue affects Apache Cassandra from 4.0.2 through 5.0.2 running Java 11.

    Operators are recommended to upgrade to a release equal to or later than 4.0.15, 4.1.8, or 5.0.3 which fixes the issue.
    Added Reference https://lists.apache.org/thread/jsk87d9yv8r204mgqpz1qxtp5wcrpysm
Share the Post:

Related Posts