CVE-2017-15692 | BDVDB-2026-97156 Detail

ApacheApache Geode

Description#

In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/103205
https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E

Exploit#

No public exploit known

History#

Version 12018-02-27Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.