When an Apache Geode cluster before v1.3.0 is operating in secure mode and an authenticated user connects to a Geode cluster using the gfsh tool with HTTP, the user is able to obtain status information and control cluster members even without CLUSTER:MANAGE privileges.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apache
Published: 2018-01-09T00:00:00
Updated: 2018-01-10T02:57:01
Reserved: 2017-08-07T00:00:00
Link: CVE-2017-12622
JSON object: View
NVD Information
Status : Modified
Published: 2018-01-10T03:29:00.187
Modified: 2023-11-07T02:38:26.840
Link: CVE-2017-12622
JSON object: View
Redhat Information
No data.
CWE