cve.bz

CVE-2017-9794

4.3 mediumEPSS 1.2%

Medium (4.3) in apache geode. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in org.apache.geode:geode-core 1.2.1.

When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently executing gfsh query, potentially revealing data that the user is not authorized to view.

Severity

CVSS 3.0

4.3 medium
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE
CWE-200
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-37m3-qp37-x3c6Mavenorg.apache.geode:geode-core>=1.0.0 <1.2.11.2.1

References

Check your stackJSON