Non évaluée
When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with...
CVE-2017-12622
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- web lists.apache.org