Lucene search
GoogleOSV:CVE-2017-15696HistoryFeb 26, 2018 - 2:29 a.m.
CVE-2017-15696
2018-02-2602:29:00
Google
osv.dev
2
0.001 Low
EPSS
Percentile
30.2%
When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| geode | eq | rel/v1.2.1 | |
| geode | eq | rel/v1.1.0 | |
| geode | eq | rel/v1.0.0-incubating | |
| geode | eq | rel/v1.3.0 | |
| geode | eq | rel/v1.2.0 |
Related
prion
prion
Code injection
2018-02-26 02:29:00
cve
cve
CVE-2017-15696
2018-02-26 02:29:00
nvd
nvd
CVE-2017-15696
2018-02-26 02:29:00
osv
osv
Apache Geode configuration request authorization vulnerability
2022-05-14 03:37:08
veracode
veracode
Information Disclosure
2018-02-27 02:10:56
cvelist
cvelist
CVE-2017-15696
2018-02-22 00:00:00
github
github
Apache Geode configuration request authorization vulnerability
2022-05-14 03:37:08