CVE-2017-9795

2018-01-1003:00:00

apache

www.cve.org

EPSS

0.029

Percentile

90.9%

JSON

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution.

CNA Affected

[
  {
    "product": "Apache Geode",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.0 to 1.2.1"
      }
    ]
  }
]