CVE-2017-15695

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-15695
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15695.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-15695
Aliases
Published
2018-06-13T17:29:00.220Z
Modified
2026-04-10T03:57:34.972957Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privileges is allowed to deploy code by invoking an internal Geode function. This allows remote code execution. Code deployment should be restricted to users with DATA:MANAGE privilege.

References

Affected packages

Git / github.com/apache/geode

Affected ranges

Type
GIT
Repo
https://github.com/apache/geode
Events
Introduced
280a407c59a89401d5d87d6e6aeda1c975870753
Last affected
2a70679608120042fa7cbee67f4dd21a085d9588
Database specific 
{
    "versions": [
        {
            "introduced": "1.0.0"
        },
        {
            "last_affected": "1.4.0"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15695.json"