{"id":"GHSA-wmcc-9vch-jmx4","summary":"Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions","details":"Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on affected versions should review data access rules for potential breaches.\n\nThis issue affects Apache Cassandra through 3.0.30, 3.11.17, 4.0.15, 4.1.7, 5.0.2.\n\nUsers are recommended to upgrade to versions 3.0.31, 3.11.18, 4.0.16, 4.1.8, 5.0.3, which fixes the issue.","aliases":["BIT-cassandra-2025-23015","CVE-2025-23015"],"modified":"2025-02-18T22:30:54Z","published":"2025-02-04T12:30:59Z","database_specific":{"cwe_ids":["CWE-267"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2025-02-04T18:32:00Z","nvd_published_at":"2025-02-04T10:15:09Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23015"},{"type":"WEB","url":"https://github.com/apache/cassandra/commit/6207a305ba2b0cebc3241e00a843ab5dbf86d2ed"},{"type":"WEB","url":"https://github.com/apache/cassandra/commit/f33267c8fae6d71166886efc3e7ddda4114ebeef"},{"type":"PACKAGE","url":"https://github.com/apache/cassandra"},{"type":"WEB","url":"https://lists.apache.org/thread/jmks4msbgkl65ssg69x728sv1m0hwz3s"},{"type":"WEB","url":"https://security.netapp.com/advisory/ntap-20250214-0006"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2025/02/03/2"},{"type":"WEB","url":"http://www.openwall.com/lists/oss-security/2025/02/11/1"}],"affected":[{"package":{"name":"org.apache.cassandra:cassandra-all","ecosystem":"Maven","purl":"pkg:maven/org.apache.cassandra/cassandra-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.0-alpha1"},{"fixed":"5.0.3"}]}],"versions":["5.0-alpha1","5.0-alpha2","5.0-beta1","5.0-rc1","5.0-rc2","5.0.0","5.0.1","5.0.2"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json"}},{"package":{"name":"org.apache.cassandra:cassandra-all","ecosystem":"Maven","purl":"pkg:maven/org.apache.cassandra/cassandra-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.1-alpha1"},{"fixed":"4.1.8"}]}],"versions":["4.1-alpha1","4.1-beta1","4.1-rc1","4.1.0","4.1.1","4.1.2","4.1.3","4.1.4","4.1.5","4.1.6","4.1.7"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json"}},{"package":{"name":"org.apache.cassandra:cassandra-all","ecosystem":"Maven","purl":"pkg:maven/org.apache.cassandra/cassandra-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0-alpha1"},{"fixed":"4.0.16"}]}],"versions":["4.0-alpha1","4.0-alpha2","4.0-alpha3","4.0-alpha4","4.0-beta1","4.0-beta2","4.0-beta3","4.0-beta4","4.0-rc1","4.0-rc2","4.0.0","4.0.1","4.0.10","4.0.11","4.0.12","4.0.13","4.0.14","4.0.15","4.0.2","4.0.3","4.0.4","4.0.5","4.0.6","4.0.7","4.0.8","4.0.9"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json"}},{"package":{"name":"org.apache.cassandra:cassandra-all","ecosystem":"Maven","purl":"pkg:maven/org.apache.cassandra/cassandra-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.1"},{"fixed":"3.11.18"}]}],"versions":["3.1","3.1.1","3.10","3.11.0","3.11.1","3.11.10","3.11.11","3.11.12","3.11.13","3.11.14","3.11.15","3.11.16","3.11.17","3.11.2","3.11.3","3.11.4","3.11.5","3.11.6","3.11.7","3.11.8","3.11.9","3.2","3.2.1","3.3","3.4","3.5","3.6","3.7","3.8","3.9"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json"}},{"package":{"name":"org.apache.cassandra:cassandra-all","ecosystem":"Maven","purl":"pkg:maven/org.apache.cassandra/cassandra-all"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.31"}]}],"versions":["0.7.0","0.7.0-rc4","0.7.1","0.7.10","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.6-2","0.7.7","0.7.8","0.7.9","0.8.0","0.8.0-beta1","0.8.0-beta2","0.8.0-rc1","0.8.1","0.8.10","0.8.2","0.8.3","0.8.4","0.8.5","0.8.6","0.8.7","0.8.8","0.8.9","1.0.0","1.0.0-beta1","1.0.0-rc1","1.0.0-rc2","1.0.1","1.0.10","1.0.11","1.0.12","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.0.8","1.0.9","1.1.0","1.1.0-beta1","1.1.0-beta2","1.1.0-rc1","1.1.1","1.1.10","1.1.11","1.1.12","1.1.2","1.1.3","1.1.4","1.1.5","1.1.6","1.1.7","1.1.8","1.1.9","1.2.0","1.2.0-beta1","1.2.0-beta2","1.2.0-beta3","1.2.0-rc1","1.2.0-rc2","1.2.1","1.2.10","1.2.11","1.2.12","1.2.13","1.2.14","1.2.15","1.2.16","1.2.17","1.2.18","1.2.19","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9","2.0.0","2.0.0-beta1","2.0.0-beta2","2.0.0-rc1","2.0.0-rc2","2.0.1","2.0.10","2.0.11","2.0.12","2.0.13","2.0.14","2.0.15","2.0.16","2.0.17","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.0.8","2.0.9","2.1.0","2.1.0-beta1","2.1.0-beta2","2.1.0-rc1","2.1.0-rc2","2.1.0-rc3","2.1.0-rc4","2.1.0-rc5","2.1.0-rc6","2.1.0-rc7","2.1.1","2.1.10","2.1.11","2.1.12","2.1.13","2.1.14","2.1.15","2.1.16","2.1.17","2.1.18","2.1.19","2.1.2","2.1.20","2.1.21","2.1.22","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9","2.2.0","2.2.0-beta1","2.2.0-rc1","2.2.0-rc2","2.2.1","2.2.10","2.2.11","2.2.12","2.2.13","2.2.14","2.2.15","2.2.16","2.2.17","2.2.18","2.2.19","2.2.2","2.2.3","2.2.4","2.2.5","2.2.6","2.2.7","2.2.8","2.2.9","3.0.0","3.0.0-alpha1","3.0.0-beta1","3.0.0-beta2","3.0.0-rc1","3.0.0-rc2","3.0.1","3.0.10","3.0.11","3.0.12","3.0.13","3.0.14","3.0.15","3.0.16","3.0.17","3.0.18","3.0.19","3.0.2","3.0.20","3.0.21","3.0.22","3.0.23","3.0.24","3.0.25","3.0.26","3.0.27","3.0.28","3.0.29","3.0.3","3.0.30","3.0.4","3.0.5","3.0.6","3.0.7","3.0.8","3.0.9"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-wmcc-9vch-jmx4/GHSA-wmcc-9vch-jmx4.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}