Security Advisory

CVE-2020-36939

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-27 15:23:47

Last updated 2026-04-07 14:05:04

Assigner VulnCheck

CVSS score 8.7

State PUBLISHED

Description

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache Cassandra database credentials.

← Browse all CVEs View on cve.org ↗