CVE-2023-30601

Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 4.0.0 through 4.0.9 Apache Cassandra versions 4.1.0 through 4.1.1

Description The issue is related to privilege escalation when enabling FQL/Audit logs, allowing a user with JMX access to run arbitrary commands as the user running Apache Cassandra. To exploit this issue, nodetool/JMX access is required.

Recommendations For Apache Cassandra versions 4.0.0 through 4.0.9, upgrade to 4.0.10 and leave the new FQL/Auditlog configuration property allow nodetool archive command as false. For Apache Cassandra versions 4.1.0 through 4.1.1, upgrade to 4.1.2 and leave the new FQL/Auditlog configuration property allow nodetool archive command as false. As a temporary workaround, consider disabling access for any non-trusted users to prevent exploitation.