Non notée
CVE-2026-32588 Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via…
Description
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Cassandra 5.0 | 5.0 → 5.0.6 | Pas de correctif indiqué |
| Apache Cassandra 4.1 | 4.1 → 4.1.10 | Pas de correctif indiqué |
| Apache Cassandra 4.0 | 4.0 → 4.0.19 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Cassandra
Les 10 CVE de Apache Cassandra →
CVE-2026-27315
Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from…
Non notée
CVE-2026-27314
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only…
Non notée
CVE-2025-26467
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra
Non notée
CVE-2024-27137
In Apache Cassandra it is possible for a local attacker without access to the Apache Cassandra process or configuration…
Non notée