Security Advisory

CVE-2017-9795

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-01-10 03:00:00
Last updated 2024-09-16 22:30:33
Assigner apache
CVSS score not scored
State PUBLISHED

Description

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries that allow read and write access to objects within unauthorized regions. In addition a user could invoke methods that allow remote code execution.