Cis Cassandra311 3.2

Ensure that the default password changed for the cassandra role

cyberstrikeus Updated

File contents

3.2 Ensure that the default password changed for the cassandra role

Profile Applicability

  • Level 1 - Cassandra
  • Level 2 - Cassandra
  • Level 1 - Cassandra on Linux
  • Level 2 - Cassandra on Linux

Description

The cassandra role has a default password which must be changed.

Rationale

Failure to change the default password for the cassandra role may pose a risk to the database in the form of unauthorized access.

Audit

Connect to Cassandra database to verify whether the cassandra role has default password.

cqlsh -u cassandra -p cassandra

If the connection is successful this is a finding.

Remediation

Change the password for the casssandra role by issuing the following command:

Where is replaced with the password of your choosing.

Default Value

cassandra

References

  1. http://cassandra.apache.org/doc/latest/operating/security.html

CIS Controls

  • v8: 5.2 Use Unique Passwords
  • v7: 4.4 Use Unique Passwords

Profile

  • Level 1 | Automated

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Cassandra/cis-apache-cassandra-3-11-benchmark-v1/cis-cassandra311-3.2 commit fdfdb502b7

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-cassandra311-3-2