Threats affecting pkg:github/bitnami/cassandra

Bitnami Cassandra container images contain a vulnerability where the default superuser account 'cassandra' is not removed when a custom administrator account is configured. This results in the default cassandra:cassandra superuser credentials remaining active, providing an unintended access path. The issue affects specific versions of the container images prior to fixed releases in the 4.0.x, 4.1.x, and 5.0.x series. The vulnerability has a critical severity with a CVSS score of 9.8.