PT-2026-30915

CVE-2026-27315

·

Published

2026-04-07

·

Updated

2026-09-18

Description by

CVSS 4.0
6.9
Medium
MetricsAV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Apache Cassandra versions 4.0 through 4.0.19
Description Apache Cassandra's command-line tool, cqlsh, saves command history in the ~/.cassandra/cqlsh history file. This file does not redact sensitive information, meaning passwords used in cqlsh commands are stored in cleartext on disk.
Recommendations Upgrade to version 4.0.20 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-532: Insertion of Sensitive Information into Log File
Related identifiers
CVE-2026-27315
GHSA-FH34-C629-P8XJ
BIT-CASSANDRA-2026-27315
CLEANSTART-2026-DD05788
CLEANSTART-2026-RN56220
CLEANSTART-2026-TJ88203
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com