CVE-2017-12622

When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the…

published January 10, 2018

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02075 · 81.3th percentile
Published
2018-01-10T03:00Z
EPSS history
Timeline
  • 10 JAN 03:00Z
    When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the…
    cvelistv5