In Apache Geode before v1.4.0, the TcpServer within the Geode locator opens a network port that deserializes data. If an unprivileged user gains access to the Geode locator, they may be able to cause remote code execution if certain classes are present on the classpath.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/103205 | Third Party Advisory VDB Entry |
https://lists.apache.org/thread.html/d0e00f2e147a9e9b13a6829133092f349b2882bf6860397368a52600%40%3Cannounce.tomcat.apache.org%3E |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apache
Published: 2018-02-23T00:00:00
Updated: 2018-03-05T10:57:01
Reserved: 2017-10-21T00:00:00
Link: CVE-2017-15692
JSON object: View
NVD Information
Status : Modified
Published: 2018-02-27T15:29:00.207
Modified: 2023-11-07T02:40:20.693
Link: CVE-2017-15692
JSON object: View
Redhat Information
No data.
CWE