CVE-2023-33972

Summary

CVE-2023-33972 is a vulnerability affecting Scylladb, a NoSQL data store that utilizes the Seastar framework and is compatible with Apache Cassandra. The issue enables authenticated users with the authorization to create tables in a specific keyspace to escalate their privileges and gain unauthorized access to other tables within the same keyspace. The vulnerability, as of now, remains unpatched. A temporary workaround involves disabling the CREATE privileges on the affected keyspace and creating new tables on behalf of other users.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.