Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are recommended to upgrade to version 5.0.7+, which fixes this issue.
| Vendor | Product | Versions |
|---|---|---|
| apache software foundation | apache cassandra | maven/org.apache.cassandra:cassandra-all: >= 5.0-alpha1, < 5.0.7 |
Updated severity to HIGH and marked the vulnerability as exploit available and actively exploited.
Initial creation
