CVEs-PoC/2015/CVE-2015-0225.md

CVE-2015-0225

Description

The default configuration in Apache Cassandra 1.2.0 through 1.2.19, 2.0.0 through 2.0.13, and 2.1.0 through 2.1.3 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request.

POC

Reference

• http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/131249/Apache-Cassandra-Remote-Code-Execution.html

Github

• https://github.com/mesosphere-backup/cassandra-mesos-deprecated