CVE-2021-44521

high-risk
Published 2022-02-11

When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible for an attacker to execute arbitrary code on the host. The attacker would need to have enough permissions to create user defined functions in the cluster to be able to exploit this. Note that this configuration is documented as unsafe, and will continue to be considered unsafe after this CVE.

Do I need to act?

!
90.6% chance of exploitation in next 30 days
EPSS score — higher than 9% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.1/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Apache

References (8)

Mailing List http://www.openwall.com/lists/oss-security/2022/02/11/4
Exploit https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-f...
Issue Tracking https://lists.apache.org/thread/y4nb9s4co34j8hdfmrshyl09lokm7356
Third Party Advisory https://security.netapp.com/advisory/ntap-20220225-0001/
Mailing List http://www.openwall.com/lists/oss-security/2022/02/11/4
Exploit https://jfrog.com/blog/cve-2021-44521-exploiting-apache-cassandra-user-defined-f...
Issue Tracking https://lists.apache.org/thread/y4nb9s4co34j8hdfmrshyl09lokm7356
Third Party Advisory https://security.netapp.com/advisory/ntap-20220225-0001/
56
/ 100
high-risk
Severity 31/34 · Critical
Exploitability 20/34 · Moderate
Exposure 5/34 · Minimal