CVE-2017-15696

When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests

published February 26, 2018

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02005 · 80.5th percentile
Published
2018-02-26T02:00Z
EPSS history
Timeline
  • 26 FEB 02:00Z
    When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests
    cvelistv5