CVE-2020-17516 : Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and

Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.

Published 2021-02-03 17:15:13

Updated 2021-09-16 13:19:53

Source Apache Software Foundation

View at NVD, CVE.org

Products affected by CVE-2020-17516

Apache » Cassandra
Versions from including (>=) 2.2.0 and up to, including, (<=) 2.2.19
cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*
Matching versions
Apache » Cassandra
Versions from including (>=) 3.11.0 and up to, including, (<=) 3.11.9
cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*
Matching versions
Apache » Cassandra
Versions from including (>=) 2.1.0 and up to, including, (<=) 2.1.22
cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*
Matching versions
Apache » Cassandra
Versions from including (>=) 3.0.0 and up to, including, (<=) 3.0.23
cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2020-17516

Top countries where our scanners detected CVE-2020-17516

Top open port discovered on systems with this issue 9042

IPs affected by CVE-2020-17516 4,444

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2020-17516!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2020-17516

EPSS FAQ

0.16%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-17516

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	AV:N/AC:M/Au:N/C:P/I:N/A:N	8.6	2.9	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	3.9	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2020-17516

CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
Assigned by:
- nvd@nist.gov (Primary)
- security@apache.org (Secondary)

References for CVE-2020-17516

https://lists.apache.org/thread.html/rcb16f36cafa184dd159e94033f87d0fc274c4752d467f3a09f2ceae4@%3Ccommits.cassandra.apache.org%3E

[jira] [Updated] (CASSANDRA-16455) CVE-2020-17516 mitigation in 2.2.x branch - Pony Mail
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/rd84bec24907617bdb72f7ec907cd7437a0fd5a8886eb55aa84dd1eb8@%3Ccommits.cassandra.apache.org%3E

[jira] [Created] (CASSANDRA-16455) CVE-2020-17516 mitigation in 2.2.x branch - Pony Mail
Mailing List;Vendor Advisory
http://mail-archives.apache.org/mod_mbox/cassandra-user/202102.mbox/%3c6E4340A5-D7BE-4D33-9EC5-3B505A626D8D@apache.org%3e

[CVE-2020-17516] Apache Cassandra internode encryption enforcement vulnerability
Mailing List;Vendor Advisory
https://security.netapp.com/advisory/ntap-20210521-0002/

CVE-2020-17516 Apache Cassandra Vulnerability in NetApp Products | NetApp Product Security
Mailing List;Third Party Advisory
https://lists.apache.org/thread.html/r81243a412a37a22211754936a13856af07cc68a93d728c52807486e9@%3Ccommits.cassandra.apache.org%3E

[jira] [Updated] (CASSANDRA-16455) CVE-2020-17516 mitigation in 2.2.x branch - Pony Mail
Mailing List;Third Party Advisory