apache geode CVE-2017-15695 is a vulnerability in Apache Geode
Published on June 13, 2018

When an Apache Geode server versions 1.0.0 to 1.4.0 is configured with a security manager, a user with DATA:WRITE privileges is allowed to deploy code by invoking an internal Geode function. This allows remote code execution. Code deployment should be restricted to users with DATA:MANAGE privilege.

NVD


Products Associated with CVE-2017-15695

Want to know whenever a new CVE is published for Apache Geode? stack.watch will email you.

Apache Geode
 

Affected Versions

Apache Software Foundation Apache Geode Version 1.0.0 to 1.4.0 is affected by CVE-2017-15695

Exploit Probability

EPSS
2.24%
Percentile
84.47%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.