Apache Geode Data Leakage Vulnerability
CVE-2017-9794
4.3MEDIUM
What is CVE-2017-9794?
In Apache Geode operating in secure mode, users with read privileges can execute queries via the gfsh command line utility. However, versions prior to 1.2.1 may expose query results containing data from concurrently running gfsh commands by other users. This behavior can lead to unauthorized access to sensitive information, potentially violating data privacy and confidentiality standards.
Affected Version(s)
Apache Geode 1.0.0
Apache Geode 1.1.0
Apache Geode 1.1.1