CVE-2017-9796
CVE-2017-9796
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jan 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
When an Apache Geode cluster before v1.3.0 is operating in secure mode, a user with read access to specific regions within a Geode cluster may execute OQL queries containing a region name as a bind parameter that allow read access to objects within unauthorized regions.
Affected products
Apache Software Foundation · Apache Geode