legal! go Jeff Minter
Ah now lads.
Under its default configuration, Cassandra binds an unauthenticated JMX/RMI interface to all network interfaces. As RMI is an API for the transport and remote execution of serialized Java, anyone with access to this interface can execute arbitrary code as the running user.
definitive! (via Shero)
Links for 2015-04-01
permalink. Both comments and trackbacks are currently closed.. Bookmark the