[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBlyyZDK4lmbvsIuNfFmnl8H4_DUaArgqAIFAAKhbJIA":3,"g5a-risk:CVE-2018-8016":104},{"success":4,"data":5,"meta":102},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":48,"weaknesses":54,"weaknessesCount":48,"isActivelyExploited":63,"cisaInfo":15,"otxData":15,"relatedBlogPosts":64,"seoMetadata":65,"configurations":90,"relatedVendorCves":100,"notableEvents":101},"CVE-2018-8016","What is CVE-2018-8016?","The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX\u002FRMI interface to all network interfaces, which allows remote attackers to execute arbitrary Java code via an RMI request. This issue is a regression of CVE-2015-0225. The regression was introduced in https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FCASSANDRA-12109. The fix for the regression is implemented in https:\u002F\u002Fissues.apache.org\u002Fjira\u002Fbrowse\u002FCASSANDRA-14173. This fix is contained in the 3.11.2 release of Apache Cassandra.","The default configuration in Apache Cassandra 3.8 through 3.11.1 binds an unauthenticated JMX\u002FRMI interface to all network interfaces, which allows remote at...","2018-06-28T16:29:00.217","2023-11-07T03:01:21.38",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":4,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.0227,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","cassandra","*","cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*",1,[50],{"url":51,"source":52,"tags":53},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fbafb9060bbdf958a1c15ba66c68531116fba4a83858a2796254da066%40%3Cuser.cassandra.apache.org%3E","Apache",[],[55],{"id":56,"name":57,"description":58,"extendedDescription":59,"status":60,"abstraction":61,"structure":62},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",false,[],{"title":66,"metaDescription":67,"keywords":68,"canonicalUrl":69,"structuredData":70},"What is CVE-2018-8016? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-8016, a critical severity cyber security vulnerability from 2018. The default configuration in Apache Cassandra 3.8 throug...","CVE-2018-8016, CVE-2018-8016 vulnerability, CVE-2018-8016 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, apache security, cassandra vulnerability","\u002Fwhat-is\u002Fcve-2018-8016",{"@context":71,"@type":72,"headline":66,"description":67,"datePublished":10,"dateModified":11,"author":73,"publisher":77,"about":81,"mainEntityOfPage":85,"articleSection":88,"keywords":89},"https:\u002F\u002Fschema.org","TechArticle",{"@type":74,"name":75,"url":76},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":74,"name":75,"url":76,"logo":78},{"@type":79,"url":80},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":82,"name":6,"description":83,"additionalType":84},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":86,"@id":87},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-8016","Cybersecurity","CVE-2018-8016, CVE-2018-8016 vulnerability, CVE-2018-8016 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[91],{"Operator":15,"Negate":15,"Nodes":92},[93],{"Operator":94,"Negate":15,"CPEMatch":95},"OR",[96],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":97,"VersionStartExcluding":15,"VersionStartIncluding":98,"VersionEndExcluding":15,"VersionEndIncluding":99},"848F577A-CD49-4FA5-A10B-ECEE0A008536","3.8","3.11.1",[],[],{"lastModified":11,"cacheTime":103,"version":33},1792347348778,{"score":105,"band":106,"action":107,"scoredAt":108},55,"Medium","Plan remediation","2026-10-16T06:44:19.963822+00:00"]