Unrated
When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with...
CVE-2017-12622
First seen on SecPulse
Original description The description as published by the source.
When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- web lists.apache.org