Loading...
Security Resources

Software Updates

Database Security Knowledgebase Update 6.33

Trustwave Database Security Knowledgebase (ShatterKB) 6.33 is now available. It introduces new checks for Cassandra and Cassandra.

New Checks - Cassandra

  • List all users
    • Description: Reports list of all users.
    • Risk: Informational
  • Credential Verification
    • Description:
    • Risk: Informational
  • Ensure client encryption is enabled
    • Description: Verify that 'client_encryption_options' is enabled.
    • Risk: Medium
  • Ensure Audit logging is enabled
    • Description: Verify Audit logging is enabled.
    • Risk: Medium
  • Ensure Cassandra Authorizer is enabled
    • Description: Verify the Authorizer parameter is set to 'CassandraAuthorizer'.
    • Risk: Medium
  • Ensure server encryption for internode is enabled
    • Description: Verify that 'internode_encryption' option under 'server_encryption_options' parameter is not set to 'none'.
    • Risk: Medium
  • Ensure Data at rest encryption is enabled
    • Description: Verify that 'transparent_data_encryption_options' option is set to 'true'.
    • Risk: Medium
  • Cassandra - CVE-2021-44521
    • Description: Check the database version to determine if the patch for CVE-2021-44521 is missing.
    • Risk: High
  • List all super users
    • Description: Reports list of all super users.
    • Risk: Medium
  • Ensure password authentication is enabled
    • Description: Verify the Authenticator option is set to 'PasswordAuthenticator'.
    • Risk: Medium
  • Ensure cassandra network authorizer is enabled
    • Description: Verify that 'network_authorizer' is set to 'CassandraNetworkAuthorizer'.
    • Risk: Medium
  • Credential Verification
    • Description:
    • Risk: Informational

Availability

  • Available to all AppDetectivePRO and DbProtect customers with maintenance (subscription or perpetual) in good standing at no additional cost.
  • Download SHATTER Knowledgebase from the Trustwave Support Portal. (https://www.trustwave.com/company/support/ and select AppDetectivePRO or DbProtect)
  • AppDetectivePRO customers can use the Updater within the product as well