CVE-2015-0225 in Apache Cassandra
Summary
The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
11/18/2014
Disclosure
04/03/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 74609 | Apache Cassandra JMX/RMI command injection | 77 | Not defined | Workaround | CVE-2015-0225 |