Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-12622

When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.0%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 5.5
Products affected by CVE-2017-12622
  • Apache » Geode » Version: 1.0.0
    cpe:2.3:a:apache:geode:1.0.0
  • Apache » Geode » Version: 1.1.0
    cpe:2.3:a:apache:geode:1.1.0
  • Apache » Geode » Version: 1.1.1
    cpe:2.3:a:apache:geode:1.1.1
  • Apache » Geode » Version: 1.2.0
    cpe:2.3:a:apache:geode:1.2.0
  • Apache » Geode » Version: 1.2.1
    cpe:2.3:a:apache:geode:1.2.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved