CVE-2017-9797

When an Apache Geode cluster before v1.2.1 is operating in secure mode, an unauthenticated client can enter multi-user authentication mode and send metadata messages. These metadata operations could leak information about application data types. In addition, an attacker could perform a denial of...

PT-2017-19192

Name of the Vulnerable Software and Affected Versions Apache Geode versions prior to 1.2.1 Description The issue allows an unauthenticated client to enter multi-user authentication mode and send metadata messages when the cluster is operating in secure mode. This could lead to information leakage...