cassandra vulnerabilities (Bitnami)

10 vulnerabilities.

• cassandra Bitnami Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized CVE-2026-47846 Fix available 9.8 CriticalJune 18, 2026
• cassandra Bitnami Apache Cassandra: cqlsh history sensitive information leak CVE-2026-27315 Fix available 5.5 MediumApril 7, 2026
• cassandra Bitnami Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only) CVE-2025-26467 Fix available 8.8 HighAugust 25, 2025
• cassandra Bitnami Apache Cassandra: unrestricted deserialization of JMX authentication credentials CVE-2024-27137 Fix available 5.3 MediumFebruary 4, 2025
• cassandra Bitnami Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions CVE-2025-24860 Fix available 5.4 MediumFebruary 4, 2025
• cassandra Bitnami Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions CVE-2025-23015 Fix available 8.8 HighFebruary 4, 2025
• cassandra Bitnami Apache Cassandra: Privilege escalation when enabling FQL/Audit logs CVE-2023-30601 Fix available 7.8 HighMay 30, 2023
• cassandra Bitnami Remote code execution for scripted UDFs CVE-2021-44521 Public exploitFix available EPSS 58.9% 9.1 CriticalFebruary 11, 2022
• cassandra Bitnami Authentication Bypass in Apache Cassandra CVE-2020-17516 Fix available 7.5 HighFebruary 3, 2021
• cassandra Bitnami Man-in-the-middle attack in Apache Cassandra CVE-2020-13946 Fix available 5.9 MediumSeptember 1, 2020