| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.geode:geode-core | < 1.9.0 | 1.9.0 |
| geode | ≥ 1.0.0, ≤ 1.8.0 |
When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free