Ali Mirheidari

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 3.0.30 Apache Cassandra versions 3.11.17 Apache Cassandra versions 4.0.16 Apache Cassandra versions 4.1.7 Apache Cassandra versions 5.0.2 Description: A privilege escalation issue exists in Apache Cassandra where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. This can potentially impact the confidentiality, integrity, and availability of protected information. Recommendations: Upgrade to Apache Cassandra version 4.0.17 to resolve the issue. Follow the recommendations from CVE-2025-23015 for versions 3.0, 3.11, 4.1, and 5.0.

**Name of the Vulnerable Software and Affected Versions** Apache Cassandra versions 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2 **Description** A privilege escalation issue exists in Apache Cassandra, where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches. **Recommendations** To resolve the issue, upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, or 5.0.3, which fixes the issue. Operators should review data access rules for potential breaches.

**Name of the Vulnerable Software and Affected Versions** Splunk Enterprise versions prior to 8.1.12 Splunk Enterprise versions prior to 8.2.9 Splunk Enterprise versions prior to 9.0.2 **Description** The issue arises from the failure of Splunk Enterprise to properly validate and escape the Host header, allowing a remote authenticated user to conduct various attacks against the system. These attacks include cross-site scripting and cache poisoning. **Recommendations** For versions prior to 8.1.12, update to version 8.1.12 or later. For versions prior to 8.2.9, update to version 8.2.9 or later. For versions prior to 9.0.2, update to version 9.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** Splunk Enterprise version 9.0.0 **Description** The issue arises when using Ingest Actions to configure a destination on Amazon Simple Storage Service (S3) in Splunk Web, where TLS certificate validation is not correctly performed. This affects connections between Splunk Enterprise and an Ingest Actions Destination through Splunk Web, specifically in environments with configured TLS certificate validation. It does not impact destinations configured directly in the outputs.conf configuration file. **Recommendations** For Splunk Enterprise version 9.0.0, consider disabling the use of Ingest Actions for configuring S3 destinations in Splunk Web until a fix is available, and instead, configure destinations directly in the outputs.conf configuration file to bypass the vulnerability.