Apache Geode Server Vulnerability Leading to Unauthorized Metadata Modification
CVE-2017-15694

6.5MEDIUM

Key Information:

Vendor

Apache
Status
Apache Geode
Vendor
CVE Published:
21 June 2019

What is CVE-2017-15694?

In secure mode, the Apache Geode server versions 1.0.0 to 1.8.0 can be exploited by an authenticated user with write permissions on certain data regions. This vulnerability allows a malicious user to alter internal cluster metadata. Such modifications can disrupt normal cluster operations and lead to potential data integrity issues.

Affected Version(s)

Apache Geode Apache Geode 1.0.0 to 1.8.0

References

https://lists.apache.org/thread.html/311505e7b7a045aaa246...
x_refsource_MISC
http://www.securityfocus.com/bid/108870
vdb-entryx_refsource_BID

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.