Lucene search
K

7 matches found

OSV
OSV
added 2022/05/17 2:50 a.m.1 views

GHSA-2GW6-73WC-X88F Apache Geode information disclosure vulnerability

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the...

7.5CVSS6AI score0.00073EPSS
Exploits0References2
CNVD
CNVD
added 2017/04/07 12:0 a.m.1 views

Apache Geode Information Disclosure Vulnerability

Geode is a data management platform that provides real-time, consistent access to data-critical applications across the entire cloud architecture. Apache Geode sets the security-manager attribute and fails to set user permissions correctly after enabling clustering, allowing remote attackers to...

7.5CVSS7.7AI score0.00073EPSS
Exploits0References1
OSV
OSV
added 2017/04/04 6:59 p.m.16 views

CVE-2017-5649

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the...

7.5CVSS6.5AI score
Exploits0References2
Prion
Prion
added 2017/04/04 6:59 p.m.14 views

Design/Logic Flaw

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the...

4CVSS7.3AI score0.00073EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/04/04 6:59 p.m.18 views

CVE-2017-5649

Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the...

7.5CVSS7.3AI score0.00073EPSS
Exploits0References2
CVE
CVE
added 2017/04/04 6:0 p.m.56 views

CVE-2017-5649

CVE-2017-5649 affects Apache Geode prior to 1.1.1. When a cluster has security-manager enabled, remote authenticated users with CLUSTER:READ but not DATA:READ can access the data browser page in Pulse and run an OQL query, exposing data stored in the cluster. The vulnerability is demonstrated by ...

7.5CVSS7.2AI score0.00073EPSS
Exploits0References2Affected Software1
Fedora
Fedora
added 2007/11/13 12:5 a.m.44 views

[SECURITY] Fedora 7 Update: kdesdk-3.5.8-2.fc7

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kbabel: PO file management kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

9.3CVSS2.4AI score0.25469EPSS
Exploits1
Rows per page
Query Builder