Security features bypass in Cassandra - CVE-2021-44521
Published: February 11, 2022 / Updated: November 26, 2022
Vulnerability identifier: #VU60551
CSH Severity: Low
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-44521
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote user to execute arbitrary code on the system.
The vulnerability exists due to insecure configuration that allows arbitrary code execution if the following settings are applied:
enable_user_defined_functions: true
enable_scripted_user_defined_functions: true
enable_user_defined_functions_threads: false
Note, such configuration is considered insecure and as not default.
Affected software
Cassandra
Netcool Operations Insight
Datastax Enterprise with IBM
IBM Sterling Global Mailbox (GM)
Netcool Operations Insight
Datastax Enterprise with IBM
IBM Sterling Global Mailbox (GM)
How to mitigate CVE-2021-44521
Install updates from vendor's website.
Cassandra - addressed in versions 3.0.26, 3.11.12, 4.0.2
Netcool Operations Insight - update to 1.6.5
Datastax Enterprise with IBM - addressed in versions 5.1.29, 6.0.17, 6.7.16, 6.8.20
IBM Sterling Global Mailbox (GM) - update to 6.1.2.1
Netcool Operations Insight - update to 1.6.5
Datastax Enterprise with IBM - addressed in versions 5.1.29, 6.0.17, 6.7.16, 6.8.20
IBM Sterling Global Mailbox (GM) - update to 6.1.2.1