CVE-2017-15694

Source
https://nvd.nist.gov/vuln/detail/CVE-2017-15694
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15694.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-15694
Aliases
Published
2019-06-21T16:15:09Z
Modified
2024-09-03T01:45:36.561887Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
[none]
Details

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.

References

Affected packages

Git / github.com/apache/geode

Affected ranges

Type
GIT
Repo
https://github.com/apache/geode
Events

Affected versions

rel/v1.*

rel/v1.0.0-incubating
rel/v1.1.0
rel/v1.1.1
rel/v1.2.0
rel/v1.2.1
rel/v1.3.0
rel/v1.4.0
rel/v1.5.0
rel/v1.6.0
rel/v1.8.0