CVE-2017-9794 Vulnerability Details

  /     /     /  

CVE-2017-9794 Metadata Quick Info

CVE Published: 29/09/2017 | CVE Updated: 17/09/2024 | CVE Year: 2017
Source: apache | Vendor: Apache Software Foundation | Product: Apache Geode
Status : PUBLISHED

---

CVE-2017-9794 Description

When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user\'s concurrently executing gfsh query, potentially revealing data that the user is not authorized to view.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Concurrent Execution using Shared Resource with Improper Synchronization error
Source: Apache Software Foundation

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).