Lucene search

RedhatCVE-2015-0225

HistoryApr 03, 2015 - 2:59 p.m.

CVE-2015-0225

2015-04-0314:59:00

CWE-77

redhat

web.nvd.nist.gov

apache cassandra

cve-2015-0225

remote attack

rmi

java code executable

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.7

Confidence

High

EPSS

0.008

Percentile

81.8%

JSON

The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request.

Affected configurations

Nvd

Node

apachecassandraMatch1.2.0

apachecassandraMatch1.2.1

apachecassandraMatch1.2.2

apachecassandraMatch1.2.3

apachecassandraMatch1.2.4

apachecassandraMatch1.2.5

apachecassandraMatch1.2.6

apachecassandraMatch1.2.7

apachecassandraMatch1.2.8

apachecassandraMatch1.2.9

apachecassandraMatch1.2.10

apachecassandraMatch1.2.11

apachecassandraMatch1.2.12

apachecassandraMatch1.2.13

apachecassandraMatch1.2.14

apachecassandraMatch1.2.15

apachecassandraMatch1.2.16

apachecassandraMatch1.2.17

apachecassandraMatch1.2.18

apachecassandraMatch1.2.19

apachecassandraMatch2.0.0

apachecassandraMatch2.0.1

apachecassandraMatch2.0.2

apachecassandraMatch2.0.3

apachecassandraMatch2.0.4

apachecassandraMatch2.0.5

apachecassandraMatch2.0.6

apachecassandraMatch2.0.7

apachecassandraMatch2.0.8

apachecassandraMatch2.0.9

apachecassandraMatch2.0.10

apachecassandraMatch2.0.11

apachecassandraMatch2.0.12

apachecassandraMatch2.0.13

apachecassandraMatch2.1.0

apachecassandraMatch2.1.1

apachecassandraMatch2.1.2

apachecassandraMatch2.1.3

VendorProductVersionCPE
apachecassandra1.2.0cpe:2.3:a:apache:cassandra:1.2.0:*:*:*:*:*:*:*
apachecassandra1.2.1cpe:2.3:a:apache:cassandra:1.2.1:*:*:*:*:*:*:*
apachecassandra1.2.2cpe:2.3:a:apache:cassandra:1.2.2:*:*:*:*:*:*:*
apachecassandra1.2.3cpe:2.3:a:apache:cassandra:1.2.3:*:*:*:*:*:*:*
apachecassandra1.2.4cpe:2.3:a:apache:cassandra:1.2.4:*:*:*:*:*:*:*
apachecassandra1.2.5cpe:2.3:a:apache:cassandra:1.2.5:*:*:*:*:*:*:*
apachecassandra1.2.6cpe:2.3:a:apache:cassandra:1.2.6:*:*:*:*:*:*:*
apachecassandra1.2.7cpe:2.3:a:apache:cassandra:1.2.7:*:*:*:*:*:*:*
apachecassandra1.2.8cpe:2.3:a:apache:cassandra:1.2.8:*:*:*:*:*:*:*
apachecassandra1.2.9cpe:2.3:a:apache:cassandra:1.2.9:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apache	cassandra	1.2.0	cpe:2.3:a:apache:cassandra:1.2.0:::::::*
apache	cassandra	1.2.1	cpe:2.3:a:apache:cassandra:1.2.1:::::::*
apache	cassandra	1.2.2	cpe:2.3:a:apache:cassandra:1.2.2:::::::*
apache	cassandra	1.2.3	cpe:2.3:a:apache:cassandra:1.2.3:::::::*
apache	cassandra	1.2.4	cpe:2.3:a:apache:cassandra:1.2.4:::::::*
apache	cassandra	1.2.5	cpe:2.3:a:apache:cassandra:1.2.5:::::::*
apache	cassandra	1.2.6	cpe:2.3:a:apache:cassandra:1.2.6:::::::*
apache	cassandra	1.2.7	cpe:2.3:a:apache:cassandra:1.2.7:::::::*
apache	cassandra	1.2.8	cpe:2.3:a:apache:cassandra:1.2.8:::::::*
apache	cassandra	1.2.9	cpe:2.3:a:apache:cassandra:1.2.9:::::::*