CVE-2017-15694
When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - security@apache.org
- Published
- 2019-06-21
- Last modified
- 2024-08-05
- Weaknesses
- CWE-284, CWE-88
Affected products
References
- http://www.securityfocus.com/bid/108870
- https://lists.apache.org/thread.html/311505e7b7a045aaa246f0a1935703acacf41b954621b1363c40bf6f%40%3Cuser.geode.apache.or…
