Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-15696

When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data and previously deployed application code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2017-15696
  • Apache » Geode » Version: 1.0.0
    cpe:2.3:a:apache:geode:1.0.0
  • Apache » Geode » Version: 1.1.0
    cpe:2.3:a:apache:geode:1.1.0
  • Apache » Geode » Version: 1.1.1
    cpe:2.3:a:apache:geode:1.1.1
  • Apache » Geode » Version: 1.2.0
    cpe:2.3:a:apache:geode:1.2.0
  • Apache » Geode » Version: 1.2.1
    cpe:2.3:a:apache:geode:1.2.1
  • Apache » Geode » Version: 1.3.0
    cpe:2.3:a:apache:geode:1.3.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved