CVE-2017-9797

When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata…

published October 2, 2017

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of service attack on the cluster.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01358 · 71.3th percentile
Published
2017-10-02T13:00Z
EPSS history
Timeline
  • 02 OCT 13:00Z
    When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata…
    cvelistv5