| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.geode:geode-core | ≥ 1.1.0, < 1.1.1 | 1.1.1 |
| geode | ≤ 1.1.0 |
Apache Geode before 1.1.1, when a cluster has enabled security by setting the security-manager property, allows remote authenticated users with CLUSTER:READ but not DATA:READ permission to access the data browser page in Pulse and consequently execute an OQL query that exposes data stored in the cluster.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free