CVE-2017-15696 | BDVDB-2026-97125 Detail

ApacheApache Geode

Description#

When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://lists.apache.org/thread.html/28989e6ed0d3c29e46a489ae508302a50407a40691d5dc968f78cd3f%40%3Cdev.geode.apache.org%3E

Exploit#

No public exploit known

History#

Version 12018-02-26Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.