cve.bz

CVE-2017-15694

6.5 mediumEPSS 2.2%

Medium (6.5) in apache geode. EPSS 2.2% chance of exploitation in the next 30 days. Fixed in org.apache.geode:geode-core 1.9.0.

When an Apache Geode server versions 1.0.0 to 1.8.0 is operating in secure mode, a user with write permissions for specific data regions can modify internal cluster metadata. A malicious user could modify this data in a way that affects the operation of the cluster.

Severity

CVSS 3.0

6.5 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
CWE
CWE-88
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-p426-qw2p-v95vMavenorg.apache.geode:geode-core<1.9.01.9.0

References

Check your stackJSON