CVE-2017-5649

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ…

published April 4, 2017

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the cluster.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02776 · 86.2th percentile
Published
2017-04-04T18:00Z
EPSS history
Timeline
  • 04 APR 18:00Z
    Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ…
    cvelistv5