Will Brattain

Name of the Vulnerable Software and Affected Versions: Apache Cassandra versions 3.0.30 Apache Cassandra versions 3.11.17 Apache Cassandra versions 4.0.16 Apache Cassandra versions 4.1.7 Apache Cassandra versions 5.0.2 Description: A privilege escalation issue exists in Apache Cassandra where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. This can potentially impact the confidentiality, integrity, and availability of protected information. Recommendations: Upgrade to Apache Cassandra version 4.0.17 to resolve the issue. Follow the recommendations from CVE-2025-23015 for versions 3.0, 3.11, 4.1, and 5.0.

**Name of the Vulnerable Software and Affected Versions** Apache Cassandra versions 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2 **Description** A privilege escalation issue exists in Apache Cassandra, where a user with MODIFY permission on all keyspaces can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches. **Recommendations** To resolve the issue, upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, or 5.0.3, which fixes the issue. Operators should review data access rules for potential breaches.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 17 Apple iPadOS versions prior to 17 Apple tvOS versions prior to 17 Apple watchOS versions prior to 10 Apple macOS versions prior to Sonoma 14 **Description** The issue is related to the handling of protocols, which may cause an app to fail to enforce App Transport Security. This could potentially lead to security issues. The flaw resides in Apple's App Transport Security. **Recommendations** For Apple iOS versions prior to 17, update to iOS 17 or later to resolve the issue. For Apple iPadOS versions prior to 17, update to iPadOS 17 or later to resolve the issue. For Apple tvOS versions prior to 17, update to tvOS 17 or later to resolve the issue. For Apple watchOS versions prior to 10, update to watchOS 10 or later to resolve the issue. For Apple macOS versions prior to Sonoma 14, update to macOS Sonoma 14 or later to resolve the issue.