CVE-2018-8016
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-8016
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX/RMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in https://issues.apache.org/jira/browse/CASSANDRA-12109. The fix for the regression is implemented in https://issues.apache.org/jira/browse/CASSANDRA-14173. This fix is contained in the 3.11.2 release of Apache Cassandra.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apache Cassandra 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apache Cassandra是美国阿帕奇（Apache）软件基金会的一套开源分布式NoSQL数据库系统。 Apache Cassandra 3.8版本至3.11.1版本中的默认配置存在安全漏洞，该漏洞源于程序将未认证的JMX/RMI接口捆绑到全部的网络接口上。远程攻击者可通过发送RMI请求利用该漏洞执行任意的Java代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Apache Software Foundation | Apache Cassandra | Apache Cassandra 3.8 to 3.11.1 | - |
II. Public POCs for CVE-2018-8016
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-8016
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: Apache Cassandra
- CVE-2026-32588
Apache Cassandra: Authenticated DoS via ALTER ROLE Password - CVE-2026-27315
Apache Cassandra: cqlsh history sensitive information leak - CVE-2026-27314
Apache Cassandra: Privilege escalation via ADD IDENTITY auth - CVE-2025-26467
Apache Cassandra: User with MODIFY permission on ALL KEYSPAC - CVE-2024-27137
Apache Cassandra: unrestricted deserialization of JMX authen
Same vendor: Apache Software Foundation
- CVE-2026-39816
Apache NiFi: Missing Execute Code Required Permission on Tin - CVE-2026-25199
Apache CloudStack: Proxmox Extension Allows Unauthorized Cro - CVE-2026-25077
Apache CloudStack: Unauthenticated Command Injection in Dire - CVE-2025-69233
Apache CloudStack: Domain/account resources limits not honor - CVE-2025-66467
Apache CloudStack: MinIO policy remains intact on bucket del
V. Comments for CVE-2018-8016
No comments yet