com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=0.13), com.lightbend.akka:akka-stream-alpakka-geode_2.12 (>=0.10, <=0.13) +14 more potentially affected by CVE-2017-9797 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.2.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =0.10, =0.10, =0.3.12, =0.3.5, =0.1.9, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m2, =1.0.0-incubating.m3, =1.0.0-incubating.m2, =1.0.0-incubating, =1.0.0-incubating, =0.9.0, =0.10.1 and more Source cves:...

CVE-2017-9797

The vulnerability CVE-2017-9797 affects Apache Geode clusters running versions prior to 1.2.1 in secure mode. An unauthenticated client can enter multi-user authentication mode and send metadata messages, which can disclose information about application data types and enable a denial-of-service a...