Will Brattain

Nome do Software Vulnerável e Versões Afetadas: Apache Cassandra versões 3.0.30 Apache Cassandra versões 3.11.17 Apache Cassandra versões 4.0.16 Apache Cassandra versões 4.1.7 Apache Cassandra versões 5.0.2 Descrição: Existe uma vulnerabilidade de escalonamento de privilégios no Apache Cassandra na qual um usuário com permissão MODIFY em todos os keyspaces pode escalar privilégios para superusuário dentro de um cluster Cassandra alvo por meio de ações inseguras em um recurso do sistema. Isso pode potencialmente impactar a confidencialidade, a integridade e a disponibilidade das informações protegidas. Recomendações: Atualize para a versão 4.0.17 do Apache Cassandra para resolver o problema. Siga as recomendações do CVE-2025-23015 para as versões 3.0, 3.11, 4.1 e 5.0.

**Name of the Vulnerable Software and Affected Versions** Apache Cassandra versions 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2 **Description** A privilege escalation issue exists in Apache Cassandra, where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches. **Recommendations** To resolve the issue, upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, or 5.0.3, which fixes the issue. Operators should review data access rules for potential breaches.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple tvOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS versions prior to Sonoma 14 **Description** The issue is related to the handling of protocols, which may cause an app to fail to enforce App Transport Security. This could potentially lead to security issues. The flaw resides in Apple's App Transport Security. **Recommendations** For Apple iOS versions prior to 17, update to iOS 17 or later to resolve the issue. For Apple iPadOS versions prior to 17, update to iPadOS 17 or later to resolve the issue. For Apple tvOS versions prior to 17, update to tvOS 17 or later to resolve the issue. For Apple watchOS versions prior to 10, update to watchOS 10 or later to resolve the issue. For Apple macOS versions prior to Sonoma 14, update to macOS Sonoma 14 or later to resolve the issue.