[CASSANDRA-15121] Apache Cassandra session reuse vulnerability (TALOS-2019-0828)

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Not A Problem
• Platform: All
• Assignee: Unassigned
• Reporter: Cisco Talos
• Created: 08/May/19 15:13
• Updated: 07/Jun/19 14:31
• Resolved: 07/Jun/19 14:31

Description

Hello, the Cisco Talos team found a security vulnerability affecting Apache Cassandra. An exploitable authentication vulnerability exists in Apache Cassandra, versions 2.1.14 and 3.11.3.

As this is a sensitive security issue, please confirm maintainer for this issue to accept the detailed security advisory report and trigger input files.

 

For further information about the Cisco Vendor Vulnerability Reporting and Disclosure Policy please refer to this document which also links to our public PGP key. https://tools.cisco.com/security/center/resources/vendor_vulnerability_policy.html

Please CC [e-mail] on all correspondence related to this issue.