Description

Cassandra is an open source distributed NoSQL database

Cassandra is designed to be accessed by trusted clients inside trusted environments. It's not recommended to have Cassandra service publicly accessible.

Remediation

It's recommended to restrict access to this service on production systems

References

Cassandra Security

Related Vulnerabilities

SAP Knowledge Management and Collaboration (KMC) incorrect permissions

Rails application running in development mode

WordPress Plugin BackupBuddy Information Disclosure (2.2.28)

WordPress Plugin Mashshare-Social Media Icons SEO Share Buttons for Facebook, Twitter, Subscribe Information Disclosure (2.3.0)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-2357)

Severity

Medium

Classification

CWE-200 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration