Found vulnerability in cassandra process

AskMe-Solutions — Fri, 28 May 2021 07:24:05 GMT

Hello Everyone,

From VA scan report, We have founded vulnerability "JMX Authentication Not Enabled on Localhost Interface" that about SSRF attacks or privilege escalation on the cassandra process of Dynatrace managed. So we need to know what we can do on this vulnerability to secure.

Thank you,

Dynatrace Askme.

Re: Found vulnerability in cassandra process

The_AM — Mon, 31 May 2021 23:54:07 GMT

Hi AskMe Solutions,

Dynatrace Managed cassandra nodes don't have authentication and authorization enabled. Dynatrace Managed mitigates that risk by automatically putting IP table rules (firewall rules) in place, which make sure that only Dynatrace server nodes are able to access the cassandra port on the cassandra nodes. Cassandra is used only by Dynatrace Managed internally.

Dynatrace managed creates a dedicated user "dynatrace" in group "dynatrace" that is used for Cassandra. The user dynatrace is non-privileged service user (no console) and is not used for anything other than Dynatrace Managed.

If you have further queries about this, I suggest to open a ticket with Dynatrace Support, or chat with a specialist using the in-product live chat function.

topic Re: Found vulnerability in cassandra process in Dynatrace Managed Q&A

Found vulnerability in cassandra process

Re: Found vulnerability in cassandra process