com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0, <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=1.1.2) +58 more potentially affected by CVE-2019-10091 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.9.2)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-m3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.7.5, =0.7.4, =1.16.0, =1.21.0 and more Source cves: CVE-2019-10091 Source advisory: OSV:GHSA-WC4X-4GM2-74J8...

com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0, <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=1.1.2) +58 more potentially affected by CVE-2019-10091 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.9.2)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-m3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.7.5, =0.7.4, =1.16.0, =1.21.0 and more Source cves: CVE-2019-10091 Source advisory: GHSA-WC4X-4GM2-74J8...

CVE-2019-10091

creationtimestamp| type| source ---|---|--- 2020-03-16 17:46:02+00:00| seen| https://t.me/cibsecurity/10516...

CVE-2019-10091

CVE-2019-10091 affects Apache Geode. When TLS is enabled and ssl-endpoint-identification-enabled is true, Geode may fail to verify hostnames in the certificate SAN during the SSL handshake, enabling potential man-in-the-middle scenarios and compromising intra-cluster communications. The issue is ...

com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0, <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=1.1.2) +56 more potentially affected by CVE-2019-10091 via org.apache.geode:geode-core (>=1.0.0-incubating, <=1.9.2)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-m3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.7.5, =0.7.4, =1.16.0, =1.21.0 and more Source cves: CVE-2019-10091 Source advisory: MEND:CVE-2019-10091...