CVE-2026-32588
Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing
Résumé
Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes.
Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com
- web repo.maven.apache.org