[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$foPQvulRUtAAz7hRFIyuClzkLmasAWYTHizjK39D83T8":3,"g5a-risk:CVE-2020-17516":132},{"success":4,"data":5,"meta":130},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":69,"weaknesses":70,"weaknessesCount":48,"isActivelyExploited":79,"cisaInfo":26,"otxData":26,"relatedBlogPosts":80,"seoMetadata":81,"configurations":106,"relatedVendorCves":128,"notableEvents":129},"CVE-2020-17516","What is CVE-2020-17516?","Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, allows both encrypted and unencrypted internode connections. A misconfigured node or a malicious user can use the unencrypted connection despite not being in the same rack or dc, and bypass mutual TLS requirement.","Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19, 3.0.0 to 3.0.23, and 3.11.0 to 3.11.9, when using 'dc' or 'rack' internode_encryption setting, al...","2021-02-03T17:15:13.123","2023-11-07T03:19:12.413",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":34,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":34,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","MEDIUM","PARTIAL",4.3,8.6,2.9,0.01931,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"apache","cassandra","*","cpe:2.3:a:apache:cassandra:*:*:*:*:*:*:*:*",1,[50,54,57,60,63],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fmail-archives.apache.org\u002Fmod_mbox\u002Fcassandra-user\u002F202102.mbox\u002F%3c6E4340A5-D7BE-4D33-9EC5-3B505A626D8D%40apache.org%3e","Apache",[],{"url":55,"source":52,"tags":56},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Fr81243a412a37a22211754936a13856af07cc68a93d728c52807486e9%40%3Ccommits.cassandra.apache.org%3E",[],{"url":58,"source":52,"tags":59},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frcb16f36cafa184dd159e94033f87d0fc274c4752d467f3a09f2ceae4%40%3Ccommits.cassandra.apache.org%3E",[],{"url":61,"source":52,"tags":62},"https:\u002F\u002Flists.apache.org\u002Fthread.html\u002Frd84bec24907617bdb72f7ec907cd7437a0fd5a8886eb55aa84dd1eb8%40%3Ccommits.cassandra.apache.org%3E",[],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20210521-0002\u002F","Netapp",[67,68],"Mailing List","Third Party Advisory",5,[71],{"id":72,"name":73,"description":74,"extendedDescription":75,"status":76,"abstraction":77,"structure":78},"CWE-290","Authentication Bypass by Spoofing","This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.","","Incomplete","Base","Simple",false,[],{"title":82,"metaDescription":83,"keywords":84,"canonicalUrl":85,"structuredData":86},"What is CVE-2020-17516? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-17516, a high severity cyber security vulnerability from 2021. Apache Cassandra versions 2.1.0 to 2.1.22, 2.2.0 to 2.2.19,...","CVE-2020-17516, CVE-2020-17516 vulnerability, CVE-2020-17516 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, apache security, cassandra vulnerability","\u002Fwhat-is\u002Fcve-2020-17516",{"@context":87,"@type":88,"headline":82,"description":83,"datePublished":10,"dateModified":11,"author":89,"publisher":93,"about":97,"mainEntityOfPage":101,"articleSection":104,"keywords":105},"https:\u002F\u002Fschema.org","TechArticle",{"@type":90,"name":91,"url":92},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":90,"name":91,"url":92,"logo":94},{"@type":95,"url":96},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":98,"name":6,"description":99,"additionalType":100},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":102,"@id":103},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-17516","Cybersecurity","CVE-2020-17516, CVE-2020-17516 vulnerability, CVE-2020-17516 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[107],{"Operator":26,"Negate":26,"Nodes":108},[109],{"Operator":110,"Negate":26,"CPEMatch":111},"OR",[112,116,120,124],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":114,"VersionEndExcluding":26,"VersionEndIncluding":115},"B61EDD10-0909-46EF-9CF9-4864CDA49303","2.1.0","2.1.22",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":118,"VersionEndExcluding":26,"VersionEndIncluding":119},"8F5E166F-E5BE-436B-9A29-03C93F7921FD","2.2.0","2.2.19",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":121,"VersionStartExcluding":26,"VersionStartIncluding":122,"VersionEndExcluding":26,"VersionEndIncluding":123},"B8DDE4AE-9B3A-40FE-ADBA-821B71CB939B","3.0.0","3.0.23",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":126,"VersionEndExcluding":26,"VersionEndIncluding":127},"A98515B9-8285-4428-BE7B-292829D7D329","3.11.0","3.11.9",[],[],{"lastModified":11,"cacheTime":131,"version":32},1792338794247,{"score":133,"band":134,"action":135,"scoredAt":136},47,"Medium","Plan remediation","2026-10-16T06:50:24.011022+00:00"]