CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-13946

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to manipulate the RMI registry to perform a man-in-the-middle attack and capture user names and passwords used to access the JMX interface. The attacker can then use these credentials to access the JMX interface and perform unauthorised operations. Users should also be aware of CVE-2019-2684, a JRE vulnerability that enables this issue to be exploited remotely.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 68.9%

CVSS Severity

CVSS v3 Score 5.9

CVSS v2 Score 4.3

References

Products affected by CVE-2020-13946

Apache » Cassandra » Version: 0.3.0

cpe:2.3:a:apache:cassandra:0.3.0
Apache » Cassandra » Version: 0.4.0

cpe:2.3:a:apache:cassandra:0.4.0
Apache » Cassandra » Version: 0.4.1

cpe:2.3:a:apache:cassandra:0.4.1
Apache » Cassandra » Version: 0.4.2

cpe:2.3:a:apache:cassandra:0.4.2
Apache » Cassandra » Version: 0.5.0

cpe:2.3:a:apache:cassandra:0.5.0
Apache » Cassandra » Version: 0.5.1

cpe:2.3:a:apache:cassandra:0.5.1
Apache » Cassandra » Version: 0.6.0

cpe:2.3:a:apache:cassandra:0.6.0
Apache » Cassandra » Version: 0.6.1

cpe:2.3:a:apache:cassandra:0.6.1
Apache » Cassandra » Version: 0.6.10

cpe:2.3:a:apache:cassandra:0.6.10
Apache » Cassandra » Version: 0.6.11

cpe:2.3:a:apache:cassandra:0.6.11
Apache » Cassandra » Version: 0.6.12

cpe:2.3:a:apache:cassandra:0.6.12
Apache » Cassandra » Version: 0.6.13

cpe:2.3:a:apache:cassandra:0.6.13
Apache » Cassandra » Version: 0.6.2

cpe:2.3:a:apache:cassandra:0.6.2
Apache » Cassandra » Version: 0.6.3

cpe:2.3:a:apache:cassandra:0.6.3
Apache » Cassandra » Version: 0.6.4

cpe:2.3:a:apache:cassandra:0.6.4
Apache » Cassandra » Version: 0.6.5

cpe:2.3:a:apache:cassandra:0.6.5
Apache » Cassandra » Version: 0.6.6

cpe:2.3:a:apache:cassandra:0.6.6
Apache » Cassandra » Version: 0.6.7

cpe:2.3:a:apache:cassandra:0.6.7
Apache » Cassandra » Version: 0.6.8

cpe:2.3:a:apache:cassandra:0.6.8
Apache » Cassandra » Version: 0.6.9

cpe:2.3:a:apache:cassandra:0.6.9
Apache » Cassandra » Version: 0.7.0

cpe:2.3:a:apache:cassandra:0.7.0
Apache » Cassandra » Version: 0.7.1

cpe:2.3:a:apache:cassandra:0.7.1
Apache » Cassandra » Version: 0.7.10

cpe:2.3:a:apache:cassandra:0.7.10
Apache » Cassandra » Version: 0.7.2

cpe:2.3:a:apache:cassandra:0.7.2
Apache » Cassandra » Version: 0.7.3

cpe:2.3:a:apache:cassandra:0.7.3
Apache » Cassandra » Version: 0.7.4

cpe:2.3:a:apache:cassandra:0.7.4
Apache » Cassandra » Version: 0.7.5

cpe:2.3:a:apache:cassandra:0.7.5
Apache » Cassandra » Version: 0.7.6

cpe:2.3:a:apache:cassandra:0.7.6
Apache » Cassandra » Version: 0.7.6-2

cpe:2.3:a:apache:cassandra:0.7.6-2
Apache » Cassandra » Version: 0.7.7

cpe:2.3:a:apache:cassandra:0.7.7
Apache » Cassandra » Version: 0.7.8

cpe:2.3:a:apache:cassandra:0.7.8
Apache » Cassandra » Version: 0.7.9

cpe:2.3:a:apache:cassandra:0.7.9
Apache » Cassandra » Version: 0.8.0

cpe:2.3:a:apache:cassandra:0.8.0
Apache » Cassandra » Version: 0.8.1

cpe:2.3:a:apache:cassandra:0.8.1
Apache » Cassandra » Version: 0.8.10

cpe:2.3:a:apache:cassandra:0.8.10
Apache » Cassandra » Version: 0.8.2

cpe:2.3:a:apache:cassandra:0.8.2
Apache » Cassandra » Version: 0.8.3

cpe:2.3:a:apache:cassandra:0.8.3
Apache » Cassandra » Version: 0.8.4

cpe:2.3:a:apache:cassandra:0.8.4
Apache » Cassandra » Version: 0.8.5

cpe:2.3:a:apache:cassandra:0.8.5
Apache » Cassandra » Version: 0.8.6

cpe:2.3:a:apache:cassandra:0.8.6
Apache » Cassandra » Version: 0.8.7

cpe:2.3:a:apache:cassandra:0.8.7
Apache » Cassandra » Version: 0.8.8

cpe:2.3:a:apache:cassandra:0.8.8
Apache » Cassandra » Version: 0.8.9

cpe:2.3:a:apache:cassandra:0.8.9
Apache » Cassandra » Version: 1.0.0

cpe:2.3:a:apache:cassandra:1.0.0
Apache » Cassandra » Version: 1.0.1

cpe:2.3:a:apache:cassandra:1.0.1
Apache » Cassandra » Version: 1.0.10

cpe:2.3:a:apache:cassandra:1.0.10
Apache » Cassandra » Version: 1.0.11

cpe:2.3:a:apache:cassandra:1.0.11
Apache » Cassandra » Version: 1.0.12

cpe:2.3:a:apache:cassandra:1.0.12
Apache » Cassandra » Version: 1.0.2

cpe:2.3:a:apache:cassandra:1.0.2
Apache » Cassandra » Version: 1.0.3

cpe:2.3:a:apache:cassandra:1.0.3
Apache » Cassandra » Version: 1.0.4

cpe:2.3:a:apache:cassandra:1.0.4
Apache » Cassandra » Version: 1.0.5

cpe:2.3:a:apache:cassandra:1.0.5
Apache » Cassandra » Version: 1.0.6

cpe:2.3:a:apache:cassandra:1.0.6
Apache » Cassandra » Version: 1.0.7

cpe:2.3:a:apache:cassandra:1.0.7
Apache » Cassandra » Version: 1.0.8

cpe:2.3:a:apache:cassandra:1.0.8
Apache » Cassandra » Version: 1.0.9

cpe:2.3:a:apache:cassandra:1.0.9
Apache » Cassandra » Version: 1.1.0

cpe:2.3:a:apache:cassandra:1.1.0
Apache » Cassandra » Version: 1.1.1

cpe:2.3:a:apache:cassandra:1.1.1
Apache » Cassandra » Version: 1.1.10

cpe:2.3:a:apache:cassandra:1.1.10
Apache » Cassandra » Version: 1.1.11

cpe:2.3:a:apache:cassandra:1.1.11
Apache » Cassandra » Version: 1.1.12

cpe:2.3:a:apache:cassandra:1.1.12
Apache » Cassandra » Version: 1.1.2

cpe:2.3:a:apache:cassandra:1.1.2
Apache » Cassandra » Version: 1.1.3

cpe:2.3:a:apache:cassandra:1.1.3
Apache » Cassandra » Version: 1.1.4

cpe:2.3:a:apache:cassandra:1.1.4
Apache » Cassandra » Version: 1.1.5

cpe:2.3:a:apache:cassandra:1.1.5
Apache » Cassandra » Version: 1.1.6

cpe:2.3:a:apache:cassandra:1.1.6
Apache » Cassandra » Version: 1.1.7

cpe:2.3:a:apache:cassandra:1.1.7
Apache » Cassandra » Version: 1.1.8

cpe:2.3:a:apache:cassandra:1.1.8
Apache » Cassandra » Version: 1.1.9

cpe:2.3:a:apache:cassandra:1.1.9
Apache » Cassandra » Version: 1.2.0

cpe:2.3:a:apache:cassandra:1.2.0
Apache » Cassandra » Version: 1.2.1

cpe:2.3:a:apache:cassandra:1.2.1
Apache » Cassandra » Version: 1.2.10

cpe:2.3:a:apache:cassandra:1.2.10
Apache » Cassandra » Version: 1.2.11

cpe:2.3:a:apache:cassandra:1.2.11
Apache » Cassandra » Version: 1.2.12

cpe:2.3:a:apache:cassandra:1.2.12
Apache » Cassandra » Version: 1.2.13

cpe:2.3:a:apache:cassandra:1.2.13
Apache » Cassandra » Version: 1.2.14

cpe:2.3:a:apache:cassandra:1.2.14
Apache » Cassandra » Version: 1.2.15

cpe:2.3:a:apache:cassandra:1.2.15
Apache » Cassandra » Version: 1.2.16

cpe:2.3:a:apache:cassandra:1.2.16
Apache » Cassandra » Version: 1.2.17

cpe:2.3:a:apache:cassandra:1.2.17
Apache » Cassandra » Version: 1.2.18

cpe:2.3:a:apache:cassandra:1.2.18
Apache » Cassandra » Version: 1.2.19

cpe:2.3:a:apache:cassandra:1.2.19
Apache » Cassandra » Version: 1.2.2

cpe:2.3:a:apache:cassandra:1.2.2
Apache » Cassandra » Version: 1.2.3

cpe:2.3:a:apache:cassandra:1.2.3
Apache » Cassandra » Version: 1.2.4

cpe:2.3:a:apache:cassandra:1.2.4
Apache » Cassandra » Version: 1.2.5

cpe:2.3:a:apache:cassandra:1.2.5
Apache » Cassandra » Version: 1.2.6

cpe:2.3:a:apache:cassandra:1.2.6
Apache » Cassandra » Version: 1.2.7

cpe:2.3:a:apache:cassandra:1.2.7
Apache » Cassandra » Version: 1.2.8

cpe:2.3:a:apache:cassandra:1.2.8
Apache » Cassandra » Version: 1.2.9

cpe:2.3:a:apache:cassandra:1.2.9
Apache » Cassandra » Version: 2.0.0

cpe:2.3:a:apache:cassandra:2.0.0
Apache » Cassandra » Version: 2.0.1

cpe:2.3:a:apache:cassandra:2.0.1
Apache » Cassandra » Version: 2.0.10

cpe:2.3:a:apache:cassandra:2.0.10
Apache » Cassandra » Version: 2.0.11

cpe:2.3:a:apache:cassandra:2.0.11
Apache » Cassandra » Version: 2.0.12

cpe:2.3:a:apache:cassandra:2.0.12
Apache » Cassandra » Version: 2.0.13

cpe:2.3:a:apache:cassandra:2.0.13
Apache » Cassandra » Version: 2.0.14

cpe:2.3:a:apache:cassandra:2.0.14
Apache » Cassandra » Version: 2.0.15

cpe:2.3:a:apache:cassandra:2.0.15
Apache » Cassandra » Version: 2.0.16

cpe:2.3:a:apache:cassandra:2.0.16
Apache » Cassandra » Version: 2.0.17

cpe:2.3:a:apache:cassandra:2.0.17
Apache » Cassandra » Version: 2.0.2

cpe:2.3:a:apache:cassandra:2.0.2
Apache » Cassandra » Version: 2.0.3

cpe:2.3:a:apache:cassandra:2.0.3
Apache » Cassandra » Version: 2.0.4

cpe:2.3:a:apache:cassandra:2.0.4
Apache » Cassandra » Version: 2.0.5

cpe:2.3:a:apache:cassandra:2.0.5
Apache » Cassandra » Version: 2.0.6

cpe:2.3:a:apache:cassandra:2.0.6
Apache » Cassandra » Version: 2.0.7

cpe:2.3:a:apache:cassandra:2.0.7
Apache » Cassandra » Version: 2.0.8

cpe:2.3:a:apache:cassandra:2.0.8
Apache » Cassandra » Version: 2.0.9

cpe:2.3:a:apache:cassandra:2.0.9
Apache » Cassandra » Version: 2.1.0

cpe:2.3:a:apache:cassandra:2.1.0
Apache » Cassandra » Version: 2.1.1

cpe:2.3:a:apache:cassandra:2.1.1
Apache » Cassandra » Version: 2.1.12

cpe:2.3:a:apache:cassandra:2.1.12
Apache » Cassandra » Version: 2.1.13

cpe:2.3:a:apache:cassandra:2.1.13
Apache » Cassandra » Version: 2.1.14

cpe:2.3:a:apache:cassandra:2.1.14
Apache » Cassandra » Version: 2.1.15

cpe:2.3:a:apache:cassandra:2.1.15
Apache » Cassandra » Version: 2.1.16

cpe:2.3:a:apache:cassandra:2.1.16
Apache » Cassandra » Version: 2.1.17

cpe:2.3:a:apache:cassandra:2.1.17
Apache » Cassandra » Version: 2.1.18

cpe:2.3:a:apache:cassandra:2.1.18
Apache » Cassandra » Version: 2.1.19

cpe:2.3:a:apache:cassandra:2.1.19
Apache » Cassandra » Version: 2.1.2

cpe:2.3:a:apache:cassandra:2.1.2
Apache » Cassandra » Version: 2.1.20

cpe:2.3:a:apache:cassandra:2.1.20
Apache » Cassandra » Version: 2.1.21

cpe:2.3:a:apache:cassandra:2.1.21
Apache » Cassandra » Version: 2.1.3

cpe:2.3:a:apache:cassandra:2.1.3
Apache » Cassandra » Version: 2.1.4

cpe:2.3:a:apache:cassandra:2.1.4
Apache » Cassandra » Version: 2.1.5

cpe:2.3:a:apache:cassandra:2.1.5
Apache » Cassandra » Version: 2.1.6

cpe:2.3:a:apache:cassandra:2.1.6
Apache » Cassandra » Version: 2.1.7

cpe:2.3:a:apache:cassandra:2.1.7
Apache » Cassandra » Version: 2.1.8

cpe:2.3:a:apache:cassandra:2.1.8
Apache » Cassandra » Version: 2.1.9

cpe:2.3:a:apache:cassandra:2.1.9
Apache » Cassandra » Version: 2.2.0

cpe:2.3:a:apache:cassandra:2.2.0
Apache » Cassandra » Version: 2.2.1

cpe:2.3:a:apache:cassandra:2.2.1
Apache » Cassandra » Version: 2.2.10

cpe:2.3:a:apache:cassandra:2.2.10
Apache » Cassandra » Version: 2.2.11

cpe:2.3:a:apache:cassandra:2.2.11
Apache » Cassandra » Version: 2.2.12

cpe:2.3:a:apache:cassandra:2.2.12
Apache » Cassandra » Version: 2.2.13

cpe:2.3:a:apache:cassandra:2.2.13
Apache » Cassandra » Version: 2.2.14

cpe:2.3:a:apache:cassandra:2.2.14
Apache » Cassandra » Version: 2.2.15

cpe:2.3:a:apache:cassandra:2.2.15
Apache » Cassandra » Version: 2.2.16

cpe:2.3:a:apache:cassandra:2.2.16
Apache » Cassandra » Version: 2.2.17

cpe:2.3:a:apache:cassandra:2.2.17
Apache » Cassandra » Version: 3.0.0

cpe:2.3:a:apache:cassandra:3.0.0
Apache » Cassandra » Version: 3.0.1

cpe:2.3:a:apache:cassandra:3.0.1
Apache » Cassandra » Version: 3.0.10

cpe:2.3:a:apache:cassandra:3.0.10
Apache » Cassandra » Version: 3.0.11

cpe:2.3:a:apache:cassandra:3.0.11
Apache » Cassandra » Version: 3.0.12

cpe:2.3:a:apache:cassandra:3.0.12
Apache » Cassandra » Version: 3.0.13

cpe:2.3:a:apache:cassandra:3.0.13
Apache » Cassandra » Version: 3.0.14

cpe:2.3:a:apache:cassandra:3.0.14
Apache » Cassandra » Version: 3.0.15

cpe:2.3:a:apache:cassandra:3.0.15
Apache » Cassandra » Version: 3.0.16

cpe:2.3:a:apache:cassandra:3.0.16
Apache » Cassandra » Version: 3.0.17

cpe:2.3:a:apache:cassandra:3.0.17
Apache » Cassandra » Version: 3.0.18

cpe:2.3:a:apache:cassandra:3.0.18
Apache » Cassandra » Version: 3.0.19

cpe:2.3:a:apache:cassandra:3.0.19
Apache » Cassandra » Version: 3.0.2

cpe:2.3:a:apache:cassandra:3.0.2
Apache » Cassandra » Version: 3.0.20

cpe:2.3:a:apache:cassandra:3.0.20
Apache » Cassandra » Version: 3.0.21

cpe:2.3:a:apache:cassandra:3.0.21
Apache » Cassandra » Version: 3.0.3

cpe:2.3:a:apache:cassandra:3.0.3
Apache » Cassandra » Version: 3.0.4

cpe:2.3:a:apache:cassandra:3.0.4
Apache » Cassandra » Version: 3.0.5

cpe:2.3:a:apache:cassandra:3.0.5
Apache » Cassandra » Version: 3.0.6

cpe:2.3:a:apache:cassandra:3.0.6
Apache » Cassandra » Version: 3.0.7

cpe:2.3:a:apache:cassandra:3.0.7
Apache » Cassandra » Version: 3.0.8

cpe:2.3:a:apache:cassandra:3.0.8
Apache » Cassandra » Version: 3.0.9

cpe:2.3:a:apache:cassandra:3.0.9
Apache » Cassandra » Version: 3.11.0

cpe:2.3:a:apache:cassandra:3.11.0
Apache » Cassandra » Version: 3.11.1

cpe:2.3:a:apache:cassandra:3.11.1
Apache » Cassandra » Version: 3.11.2

cpe:2.3:a:apache:cassandra:3.11.2
Apache » Cassandra » Version: 3.11.3

cpe:2.3:a:apache:cassandra:3.11.3
Apache » Cassandra » Version: 3.11.4

cpe:2.3:a:apache:cassandra:3.11.4
Apache » Cassandra » Version: 3.11.5

cpe:2.3:a:apache:cassandra:3.11.5
Apache » Cassandra » Version: 3.11.6

cpe:2.3:a:apache:cassandra:3.11.6
Apache » Cassandra » Version: 3.11.7

cpe:2.3:a:apache:cassandra:3.11.7
Apache » Cassandra » Version: 4.0.0

cpe:2.3:a:apache:cassandra:4.0.0
Netapp » Oncommand Insight » Version: N/A

cpe:2.3:a:netapp:oncommand_insight:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-13946

Products

Pricing

Contact Us