CVE-2017-9794

When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries

published September 29, 2017

CVSS
—
EPSS
1%
Percentile
67.2
In the wild
Unconfirmed
What it is

When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently executing gfsh query, potentially revealing data that the user is not authorized to view.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01178 · 67.2th percentile
Published
2017-09-29T21:00Z
EPSS history
Timeline
  • 29 SEP 21:00Z
    When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries
    cvelistv5