CVE-2017-9795

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL…

published January 10, 2018

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04177 · 90.8th percentile
Published
2018-01-10T03:00Z
EPSS history
Timeline
  • 10 JAN 03:00Z
    When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL…
    cvelistv5