OpenParable
Skip to content
← Back to skills

Cis Cassandra40 V100 3.2

DevOps & Security
cis-cassandra40-v100-3.2

Cis Cassandra40 V100 3.2 is an Agent Skill for devops & security published in the CyberStrikeus/CyberStrike repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Ensure that the default password is changed for the cassandra role

View on GitHub ↗
QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

  1. Open your project in Codex.
  2. Copy and paste the prompt below.
  3. Review files and risks before approving any action.
Prompt to paste
Inspect the Agent Skill at https://github.com/CyberStrikeus/CyberStrike/blob/HEAD/.cyberstrike/skill/CIS_benchmarks/Server_Software/Apache_Cassandra/CIS_Apache_Cassandra_4.0_Benchmark_v1.0.0/cis-cassandra40-v100-3.2/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/cis-cassandra40-v100-3-2, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

3.2 Ensure that the default password is changed for the cassandra role

Profile Applicability

  • Level 1 - Cassandra
  • Level 1 - Cassandra on Linux

Description

The cassandra role has a default password which must be changed.

Rationale

Failure to change the default password for the cassandra role may pose a risk to the database in the form of unauthorized access.

Audit

Connect to Cassandra database to verify whether the cassandra role has default password.

cqlsh -u cassandra -p cassandra

If the connection is successful this is a finding.

Remediation

Change the password for the casssandra role by issuing the following command:

cqlsh -u cassandra -p cassandra

alter role 'cassandra' with password '<NEWPASSWORD_HERE>';

Where <NEWPASSWORD_HERE> is replaced with the password of your choosing.

Default Value

cassandra

References

  1. http://cassandra.apache.org/doc/latest/operating/security.html

CIS Controls

  • v8 5.2 Use Unique Passwords
    • Use unique passwords for all enterprise assets. Best practice implementation includes, at a minimum, an 8-character password for accounts using MFA and a 14-character password for accounts not using MFA.
  • v7 4.4 Use Unique Passwords
    • Where multi-factor authentication is not supported (such as local administrator, root, or service accounts), accounts will use passwords that are unique to that system.

Profile

  • Level 1 - Cassandra | Automated
  • Level 1 - Cassandra on Linux | Automated