Trustwave Database Security Knowledgebase (ShatterKB) 6.33 is now available. It introduces new checks for Cassandra and Cassandra.
New Checks - Cassandra
- List all users
- Description: Reports list of all users.
- Risk: Informational
- Credential Verification
- Description:
- Risk: Informational
- Ensure client encryption is enabled
- Description: Verify that 'client_encryption_options' is enabled.
- Risk: Medium
- Ensure Audit logging is enabled
- Description: Verify Audit logging is enabled.
- Risk: Medium
- Ensure Cassandra Authorizer is enabled
- Description: Verify the Authorizer parameter is set to 'CassandraAuthorizer'.
- Risk: Medium
- Ensure server encryption for internode is enabled
- Description: Verify that 'internode_encryption' option under 'server_encryption_options' parameter is not set to 'none'.
- Risk: Medium
- Ensure Data at rest encryption is enabled
- Description: Verify that 'transparent_data_encryption_options' option is set to 'true'.
- Risk: Medium
- Cassandra - CVE-2021-44521
- Description: Check the database version to determine if the patch for CVE-2021-44521 is missing.
- Risk: High
- List all super users
- Description: Reports list of all super users.
- Risk: Medium
- Ensure password authentication is enabled
- Description: Verify the Authenticator option is set to 'PasswordAuthenticator'.
- Risk: Medium
- Ensure cassandra network authorizer is enabled
- Description: Verify that 'network_authorizer' is set to 'CassandraNetworkAuthorizer'.
- Risk: Medium
- Credential Verification
- Description:
- Risk: Informational
Availability
- Available to all AppDetectivePRO and DbProtect customers with maintenance (subscription or perpetual) in good standing at no additional cost.
- Download SHATTER Knowledgebase from the Trustwave Support Portal. (https://www.trustwave.com/company/support/ and select AppDetectivePRO or DbProtect)
- AppDetectivePRO customers can use the Updater within the product as well
