En resumen
- CVE-2017-15696 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a org.apache.geode:geode-core, geode (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 2.0%, mayor que el 80.8% de las vulnerabilidades.
- Solución: actualizar a 1.4.0 o posterior.
Description
When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code.
NVD description
When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code.
Más vulnerabilidades de org.apache.geode:geode-core
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free