CVE-2017-9796 | BDVDB-2026-94982 Detail

ApacheApache Geode

Description#

When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.apache.org/thread.html/e580d22195b6b61ff9cf866ac6dd6fe16e790ff0e14a3b1a22cd20b1%40%3Cuser.geode.apache.org%3E

Exploit#

No public exploit known

History#

Version 12018-01-10Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.