3.2 Ensure that the default password changed for the cassandra role
Profile Applicability
- Level 1 - Cassandra
- Level 2 - Cassandra
- Level 1 - Cassandra on Linux
- Level 2 - Cassandra on Linux
Description
The cassandra role has a default password which must be changed.
Rationale
Failure to change the default password for the cassandra role may pose a risk to the database in the form of unauthorized access.
Audit
Connect to Cassandra database to verify whether the cassandra role has default password.
cqlsh -u cassandra -p cassandra
If the connection is successful this is a finding.
Remediation
Change the password for the casssandra role by issuing the following command:
Where is replaced with the password of your choosing.
Default Value
cassandra
References
CIS Controls
- v8: 5.2 Use Unique Passwords
- v7: 4.4 Use Unique Passwords
Profile
- Level 1 | Automated