CVE-2020-17516

Aliases:GHSA-2vxm-vp4c-fjfwBIT-cassandra-2020-17516
Advisory lineage Upstream: 0 Downstream: 2
Modified
Published: 03 Feb 2021, 16:40
Last modified:04 Aug 2024, 14:00

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
0.85% LOW
1% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Feb 2021, 16:40
Published
Vulnerability first disclosed
04 Aug 2024, 14:00
Last Modified
Vulnerability information updated

Description

Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:P/I:N/A:N

EPSS Trends

Current EPSS score: 0.85%• Percentile: 75%

Techniques & Countermeasures

  • CWE-290•Authentication Bypass by Spoofing

    This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Affected Systems

  • apache•cassandra

    ≥ 2.1.0, ≤ 2.1.22 | ≥ 2.2.0, ≤ 2.2.19 | ≥ 3.0.0, ≤ 3.0.23 | ≥ 3.11.0, ≤ 3.11.9

  • org.apache.cassandra•cassandra-all

    ≥ 2.1.0, < 3.0.24 | ≥ 3.11.0, < 3.11.10

References (11)