The Bitnami MariaDB Galera container images and Helm chart have a hardcoded default credential vulnerability. The MARIADB_REPLICATION_USER and MARIADB_REPLICATION_PASSWORD environment variables default to 'monitor' and 'monitor', respectively. This user has REPLICATION CLIENT privileges from any host. The Bitnami Helm chart for MariaDB Galera did not expose parameters to configure this user's credentials, [truncated]
Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRA_USER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassandra account in certain scenarios. This leaves the default cassandra:cassandra superuser active as an unintended [truncated]
